Get Vulnerability Updates

Data for SBOM Document ID: 61124625-e14e-495b-8b36-c2ea8cce360e

Key Value
Timestamp 2023-10-20T09:18:41Z
Tool Vendor: anchore
Name: grype
Version: 0.71.0
Component bom-ref: 84bac610dd1ce1a5
Type: container
Name: jenkins/jenkins
purl:
Total Components

478

7.11 / 10

Vulnerability Severity Distribution

Total Vulnerabilities

123

Critical

3

High

12

Medium

9

Low

5

None

92

Structural

Average: 7.5

# Description Score Score Progress
1 provided sbom is in a supported sbom format of spdx,cyclonedx 10.0
2 provided sbom should be in supported spec version for spec:1.5 and versions: 1.0,1.1,1.2,1.3,1.4 0.0
3 provided sbom should be in supported file format for spec: json and version: json,xml 10.0
4 provided sbom is parsable 10.0

NTIA-minimum-elements

Average: 7.1

# Description Score Score Progress
1 0/479 have supplier names 0.0
2 479/479 have names 10.0
3 478/479 have versions 10.0
4 479/479 have unique ID's 10.0
5 doc has 0 relationships 0.0
6 doc has 1 authors 10.0
7 doc has creation timestamp 2023-10-20T09:18:41Z 10.0

Semantic

Average: 4.4

# Description Score Score Progress
1 Doc Fields:true Pkg Fields:true 10.0
2 159/479 have licenses 3.3
3 0/479 have checksums 0.0

Quality

Average: 9.0

# Description Score Score Progress
1 159/479 components with valid license 3.3
2 479/479 components have primary purpose specified 10.0
3 0/479 components have deprecated licenses 10.0
4 6/479 components have restricted licenses 9.9
5 478/479 components have any lookup id 10.0
6 478/479 components have multiple lookup id 10.0
7 1/1 tools have creator and version 10.0

Sharing

Average: 0.0

# Description Score Score Progress
1 doc has a sharable license free 0 :: of 0 0.0