External artifacts tab
Updated: 2024-12-06 SBOM Central
Lists all external artifacts included in this SBOM.
Filter
| Filter by | Description |
|---|---|
| Search | Search artifact name(s). |
| Type | Software/OS-Firmware/Hardware |
| Package type | Filter by type of artifact e.g. generic, gem, npm, etc. |
| License approval | Filter on has approved, disapproved, etc. |
| License | Filter on has license/has no license |
| Vulnerabilities | Filter to show vulnerable artifacts within priority categories. |
| Usage | Filter on usage Deliverable/Compile time/Real time/Test. |
| Status tags | Filter on a set of status tags. |
Buttons
- Deep (dependencies) Show all dependency artifacts related to the build.
- Shallow (dependencies) Show the direct dependencies for current component.
Table description
| Header | Description |
|---|---|
| Name | Name and version of the artifact and link to detailed artifact info, in package url format. About package url (external link). |
| Status | Artifact status described with a set of tags (see below). |
| Vulnerabilities | A colored text indicating the highest priority on an existing vulnerability detected for the artifact. Link to open an inline table with a list of vulnerabilities. |
| Licenses | Licenses identified for the artifact. Light blue icon= approved, Grey=to be analyzed, Red=not approved |
| Used in | Deliverable/Compile time/Real time/Test |
| By artifact | Used by artifact. |
Vulnerability inline table
| Header | Description |
|---|---|
| Identifier | Vulnerability identity, CVE-id or other, and a link to the local [vulnerability show page]() containing detailed information and analysis tools. |
| Priority | Priority set by a manual decision or by an automated rule. |
| Added date | Date when the vulnerability was added to the WebApp. |
| Analysis | The result of analysis. |
| Action | Action fix / don't fix. |
| Due date | The due date (if any) |