Skip to main content

Upgrade SCA library data manually

Starting with Contrast version 3.7.4, you can download SCA library data manually from the Contrast Hub. This method is useful in situations where you don't have internet access (air-gapped installations).

Before you begin

  • A Contrast Hub account is required.

  • For optimal performance, plan to download the library data on a monthly basis.

  • If you have a distributed deployment with multiple servers, use the procedure in this topic for one instance. You can use the same downloaded library data files on multiple installations.


For on-premises customers using MySQL 8, the system variable local_infile must be set to ON so that Contrast can accept CSV files. For more details, see icon-external-link.svgSecurity Considerations for LOAD DATA LOCAL.


  1. Log in to the Contrast Hub.

  2. Select Downloads.

  3. Select Library data exports and download the archive version you want.

    Image shows Contrast Hub, with Downloads selected in the header, and Library Data Exports expanded.
  4. Extract the downloaded ZIP file and place the CSV files in the Contrast data/libraries directory. For example:

    Unix: /etc/contrast/data/libraries

    Windows: C:/ProgramData/contrast/data/libraries

    Some files may be hidden due to their names, so ensure all extracted files are moved to this directory.

  5. Restart Contrast.

    When Contrast restarts, the data is imported in the background. The CSV files are deleted from the folder as each file is imported.

  6. Check the data/logs/contrast.log file for success messages as each script completes. For example, you may see a message like this:

    Beginning CSV import from 'C:\Program Files\Contrast\data\libraries\java.csv' into 'artifacts_java'Import temporary table 'artifacts_java' completed, time: 36.6886968s