Optional: Red Hat Dependency Analytics (shift-left)

Table of Contents

Red Hat Dependency Analytics (RHDA) is an IDE extension that analyzes manifests such as pom.xml using Trusted Profile Analyzer intelligence.

In this workshop:

RHTPA (in the cluster) is the SBOM and advisory system of record — upload CycloneDX from syft here.
RHDA runs on an instructor or demo laptop IDE, not inside Showroom.
This catalog item does not deploy a full IDE stack on OpenShift.

Action Showroom / cluster Laptop IDE + RHDA

Action	Showroom / cluster	Laptop IDE + RHDA
Browse SBOMs in RHTPA UI	Yes	Yes (same Route)
Generate SBOM with `syft`	Yes	Yes
RHDA wavy underlines on `pom.xml`	No	Yes

Browse SBOMs in RHTPA UI

Yes

Yes (same Route)

Generate SBOM with syft

Yes

RHDA wavy underlines on pom.xml

Yes

Instructor laptop (optional demo)

Install the RHDA extension (VS Code or JetBrains).
Ensure mvn is on your PATH.
Set Red Hat Dependency Analytics → Backend URL:
- Public default: https://rhda.rhcloud.com, or
- Workshop Exhort/RHDA route when published by your RHTPA deployment.
Open the sample pom.xml and run Dependency Analytics; compare with the RHTPA UI.

Full notes for content authors: docs/rhda-rhtpa-shift-left.md in the GitOps repository.