Get Vulnerability Updates

Data for SBOM Document ID: 37cbffcf-1bd3-4daf-86b7-77deb71575b7

Key Value
Timestamp 2023-10-19T14:56:41+00:00
Tool Vendor: aquasecurity
Name: trivy
Version: 0.46.0
Component bom-ref: 361cc827-7e02-4dd7-bafb-6bf8b06dc38f
Type: application
Name: https://github.com/codenotary/immudb
purl:
OpenSSF Scorecard: 6.4 / 10
Total Components

183

5.86 / 10

Vulnerability Severity Distribution

Total Vulnerabilities

8

Critical

0

High

3

Medium

5

Low

0

None

0

Structural

Average: 7.5

# Description Score Score Progress
1 provided sbom is in a supported sbom format of spdx,cyclonedx 10.0
2 provided sbom should be in supported spec version for spec:1.5 and versions: 1.0,1.1,1.2,1.3,1.4 0.0
3 provided sbom should be in supported file format for spec: json and version: json,xml 10.0
4 provided sbom is parsable 10.0

NTIA-minimum-elements

Average: 8.5

# Description Score Score Progress
1 0/184 have supplier names 0.0
2 184/184 have names 10.0
3 174/184 have versions 9.5
4 184/184 have unique ID's 10.0
5 doc has 410 relationships 10.0
6 doc has 1 authors 10.0
7 doc has creation timestamp 2023-10-19T14:56:41+00:00 10.0

Semantic

Average: 3.3

# Description Score Score Progress
1 Doc Fields:true Pkg Fields:true 10.0
2 0/184 have licenses 0.0
3 0/184 have checksums 0.0

Quality

Average: 4.2

# Description Score Score Progress
1 0/184 components with valid license 0.0
2 184/184 components have primary purpose specified 10.0
3 no licenses found 0.0
4 no licenses found 0.0
5 174/184 components have any lookup id 9.5
6 0/184 components have multiple lookup id 0.0
7 1/1 tools have creator and version 10.0

Sharing

Average: 0.0

# Description Score Score Progress
1 doc has a sharable license free 0 :: of 0 0.0