Supply Chain catalog

The Supply Chain Catalog (Platform knowledge base) is Cortex Cloud's centralized registry of Cortex Cloud supported supply-chain tools and their associated risk factors. The catalog is distinct from the inventory displayed on the Supply Chain Tools page, which lists tools detected in your environment. Some tools may be displayed in both inventories - for example if you use Semgrep, which is also included in the catalog.

Use case

Use the catalog to cross-reference against your inventory to identify coverage gaps, assess exposure, and benchmark your security posture before integrating new tools or to replace existing ones that may be at risk.

How to access the Supply Chain Catalog

To access the Supply Chain Catalog, select Modules → Application Security → Supply Chain Catalog (under 3rd party tools).

Supply Chain Catalog inventory

This inventory includes a list of all supply chain tools in the Catalog. The inventory table properties are identical to the Supply Chain Tools inventory table. For information about these properties, refer to Supply Chain Tools.

Expanded Supply Chain catalog information

When you click a tool's entry in the inventory table, a side card opens to display information on the Overview tab, including a summary of the tool's key details.

The details provided in these tabs are identical to the details displayed in the expanded Supply Chain Tool Catalog. For information about these properties, refer to Expanded Supply Chain tool information.

Actions

Comments

Select the Comments icon in the side-panel to add comments directly to catalog items, enabling collaboration and internal notes between security and development teams regarding component usage, justification, or deprecation status.

Export tool information

To export catalog information, select the Download icon in the main inventory table. The export option is not available in the side panel.