Vigiles Prime Tutorial: Part 3 – Advanced Collaboration, Management, and Cybersecurity Compliance Assistance

Use Products to organize your manifests and enable collaboration

To enable collaboration with other members of your team, you’ll need to create a “Product.” If you have more than one product that you want to share with other members of your team, then you’ll need to create multiple “Products.”

Once you’ve set up a Product, you can simply upload your SBOMs/manifests to it. Or you can create “Folders” in each Product and upload your SBOMs/manifests to the Folders. Folders can be nested, so this will enable you to more easily organize and separate manifests within the same product.

Note: When your Vigiles account is first set up, by default you’re given a private workspace. However, you can’t share manifests or reports from within your private workspace.

Sharing products

Sharing a product with other team members allows them to view the product and any manifests associated with it. This makes it easier for team members to contribute to CVE management and remediation by uploading manifests, entering notes, whitelisting CVEs, etc.

Sharing reports for key manifest

Sharing reports is just one of multiple ways you can collaborate CVE management and remediation. You can export CVE reports in CSV, XLS and PDF (Summary and Full) formats and share them with non-Vigiles users.

You can also share a view-only version of the latest CVE report. This is particularly useful for sharing a report with others who are not on your team.

Notes and whitelists

Use the Notes feature to document your triage decisions (which might be a necessary step, depending on your regulatory requirements). When you or any member of your team adds notes to a manifest, the notes show up within all manifests in that product.

Use the Whitelist feature to ignore the CVEs that don’t apply to your product — so you can more efficiently focus on the unfixed CVEs that are relevant to your product. Just like the Notes feature, Whitelists remain/show up within all manifests in that product. And you can import your Whitelists into other products.