Customer Resources for Tanzu Hub App Portfolio Assessment (TP10)

Products

• VMware Tanzu Platform Core

Issue/Introduction

Customers and field teams require scalable, public-facing documentation to understand the functionality, connectivity, and security posture of the application assessment and modernization tools (App Portfolio Assessment) within Tanzu Platform Hub (TP10). Key concerns often include:

• How to connect to source code repositories.
• What information is captured during a scan.
• Security and privacy of data during the assessment process.

Environment

• Product: VMware Tanzu Platform - Hub
• Version: 10.x (TP10)
• Feature: App Portfolio Assessment / App Analyzer

Resolution

Tanzu Hub provides a centralized suite for assessing application portfolios. Use the following categorized resources to guide customers through setup, usage, and security compliance.

1. Technical Overview & Navigation

The App Portfolio Assessment tool analyzes repositories to identify "modernization challenges." To navigate these results:

• Viewing Challenges: To see which repositories have specific modernization hurdles, use the Repositories tab rather than the Summary dashboard for granular filtering.
• Reference: How to find which repo has that modernization challenge

2. Connectivity & Automation

Connecting to external repositories or automating assessment workflows requires secure authentication.

• OAuth & API Access: For long-lived automation or pipeline integration, use OAuth Apps rather than short-lived user tokens.
• Reference: Managing OAuth Apps in Tanzu Hub
• Reference: Tanzu Hub API and automation access

3. Security, Hardening, and Data Privacy

To quell security concerns regarding what the scanner "sees" and how the platform is secured:

• Platform Hardening: Tanzu components are built on hardened operating systems (Stemcells) and follow strict security baseline standards.
• Compliance Documentation: Detailed reports on how Tanzu handles data and maintains compliance (e.g., TAS/TKG) can be found in the centralized compliance portal.
• Reference: Tanzu Platform Compliance and Hardening
• Reference: Security Baseline and Hardening

4. Troubleshooting & Log Extraction

If issues arise during the connection or scanning process, logs can be extracted via the GraphQL endpoint:

• Log Extraction: Use the Foundation Instance ID and App GUID to query logs for external analysis.
• Reference: How to extract platform application logs from Tanzu Hub