Projects

Find any connected project, see its security and remediation state, and open its scan history.

The Projects page lists every connected project the factory scans, fixes, verifies, and delivers, with a top-level split between code repositories and container images.

A Vulnerable Projects Summary shows five status cards:

Card	Meaning
In Remediation	Projects with an active fix running
Being Verified	Projects whose fix is in the Verify stage
Needs Review	Projects with a fix or finding awaiting your approval
Scan Errors	Projects whose last scan failed and need attention
With Novel Vulnerabilities	Projects with at least one open LVE

Use the status filter chips above the project table (All, Delivered, In Progress, Being Verified, With Novel Vulnerabilities) to narrow the list. The table itself shows:

Column	Description
Project	Project name
Version	Project version
Organization	Organization the project belongs to
Type	Repo or Container
Last Scan	Relative time since the last scan, for example 20 minutes ago
Vulnerabilities	Open OSS vulnerability counts by severity, shown as C · H · M (Critical · High · Medium)
Novel Vulnerabilities	Open LVE counts by severity, shown the same way, plus a Low band
Status	Ready for review, Running, FM Scanner is running, In Progress, or Delivered

Viewing Project Details

1

Open a project

Click any project row. A side navigation opens.

2

Review the project status

Review the project status bar across Scan, Fix, Verify, and Deliver — a Delivered project shows all four stages complete and confirms every PR has merged.

3

Review project details

Review the project details: Project Name, Version, and Last Scanned date.

4

Review dependencies and CVE findings

Review dependency counts (Direct Dependencies, Transitive Dependencies) and open exploitable CVE findings.

5

Review AI-detected vulnerabilities

Review AI-detected vulnerabilities (LVE), split into Open and Fixed, each broken down by Exploitable, Critical · Non-Exploitable, and High · Non-Exploitable.