| Key | Value |
|---|---|
| Timestamp | 2023-10-20T08:05:02+00:00 |
| Signature | unsigned |
| Tool |
Vendor: aquasecurity Name: trivy Version: 0.46.0 |
| Component |
bom-ref: pkg:oci/jenkins@sha256%3Ab728c15f3d9aa442b9ab5d6d6e75f2e5663e4a14f22dfcdac35f83245e76b343?arch=amd64&repository_url=index.docker.io%2Fjenkins%2Fjenkins Type: container Name: jenkins/jenkins purl: pkg:oci/jenkins@sha256%3Ab728c15f3d9aa442b9ab5d6d6e75f2e5663e4a14f22dfcdac35f83245e76b343?arch=amd64&repository_url=index.docker.io%2Fjenkins%2Fjenkins Properties:
|
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client...
Git is distributed revision control system. `git log` can display commits in an arbitrary format usi...
procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading t...
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, ...
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2...
Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' ...
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.1...
Git is distributed revision control system. gitattributes are a mechanism to allow defining attribut...
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2...
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x ...
Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2....
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private creden...
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, ...
Git is an open source, scalable, distributed revision control system. `git shell` is a restricted lo...
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 varia...
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | provided sbom is in a supported sbom format of spdx,cyclonedx | 10.0 |
|
| 2 | provided sbom should be in supported spec version for spec:1.5 and versions: 1.0,1.1,1.2,1.3,1.4,1.5,1.6 | 10.0 |
|
| 3 | provided sbom should be in supported file format for spec: json and version: json,xml | 10.0 |
|
| 4 | provided sbom is parsable | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 150/173 have supplier names | 8.7 |
|
| 2 | 173/173 have names | 10.0 |
|
| 3 | 172/173 have versions | 9.9 |
|
| 4 | 173/173 have unique ID's | 10.0 |
|
| 5 | doc has 22 dependencies | 10.0 |
|
| 6 | doc has 1 authors | 10.0 |
|
| 7 | doc has creation timestamp 2023-10-20T08:05:02+00:00 | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | Doc Fields:true Pkg Fields:true | 10.0 |
|
| 2 | 143/173 have licenses | 8.3 |
|
| 3 | 0/173 have checksums | 0.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 138/173 components with valid license | 5.9 |
|
| 2 | 173/173 components have primary purpose specified | 10.0 |
|
| 3 | 126/173 components have deprecated licenses | 2.7 |
|
| 4 | 0/173 components have restricted licenses | 10.0 |
|
| 5 | 172/173 components have any lookup id | 9.9 |
|
| 6 | 0/173 components have multiple lookup id | 0.0 |
|
| 7 | 1/1 tools have creator and version | 10.0 |
|
| 8 | primary component found | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | doc has a sharable license free 0 :: of 0 | 0.0 |
|