FAQs

What is the difference between Application Security Coverage and Code-to-Cloud Coverage? Application Security Coverage measures whether the right scanners are activated on an asset (SCA, SAST, Secrets, IaC). Code-to-Cloud Coverage measures whether an asset can be traced across the SDLC chain. Both are required for a complete posture assessment: scanner coverage tells you whether you are looking; Code-to-Cloud Coverage tells you whether you know what you are looking at.

Does the dashboard support filters that span more than one hop? No. The dashboard currently supports single-hop filters. For example, a filter that scopes the Code-2-Cloud aArtifact view to repositories reaching a specific pipeline instance is not supported in this release.

Can I export the Coverage data? Yes, via the Get Coverage public API. Direct CSV export of the per-stage map is not available in this release.