Skip to content

Commit 9110487

Browse files
committed
Add Component level CVE feature doc
1 parent c6357cf commit 9110487

File tree

7 files changed

+16
-3
lines changed

7 files changed

+16
-3
lines changed

docs/software-supply-chain-assurance/artifact-security/overview.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -29,11 +29,12 @@ Any artifacts that go through [SBOM Orchestration](/docs/software-supply-chain-a
2929
The landing page of the Artifacts section provides a comprehensive list of all artifacts, displaying the following details for each:
3030

3131
* **Name**: The name of the artifact.
32+
* **Artifact Type**: The type of the artifact
3233
* **Digests**: The number of digests associated with the artifact.
3334
* **Environments**: The environments where the artifact has been deployed with the count.
3435
* **Vulnerabilities**: The vulnerabilities identified in the most recent scan of the digest.
3536

36-
<DocImage path={require('./static/artifacts-overview-tab.png')} width="100%" height="100%" title="Click to view full size image" />
37+
<DocImage path={require('./static/artifacts-overview.png')} width="100%" height="100%" title="Click to view full size image" />
3738

3839

3940
#### Search and filter options
@@ -100,11 +101,12 @@ The SBOM tab presents details of all the dependencies within the artifact, inclu
100101
* **Package Manager:** Tool managing the package.
101102
* **PURL:** Package URL.
102103
* **Supplier:** Source of the dependency.
104+
* **Vulnerabilities:** Shows the number of issues for each SBOM component, grouped by severity levels (Critical, High, Medium, Low) as identified through the Snyk scan.
103105

104-
<DocImage path={require('./static/scs-sbomtab.png')} width="100%" height="100%" title="Click to view full size image" />
106+
<DocImage path={require('./static/sbom-tab.png')} width="100%" height="100%" title="Click to view full size image" />
105107

106108

107-
For more information about the levels of image dependencies, refer to the "[Label Components from Image](/docs/software-supply-chain-assurance/how-to-guides/label-components-from-image)" documentation.
109+
For more information about the levels of image dependencies, refer to the [How to detect base images in SBOM](/docs/software-supply-chain-assurance/how-to-guides/label-components-from-image) documentation.
108110

109111

110112
#### Search and filter options
-392 KB
Binary file not shown.
510 KB
Loading
508 KB
Loading
-624 KB
Binary file not shown.

docs/software-supply-chain-assurance/open-source-management/generate-sbom-for-artifacts.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -161,6 +161,12 @@ This example **Deploy** stage has two steps:
161161
</details>
162162

163163

164+
### View vulnerabilities in the SBOM
165+
166+
167+
After you run the SBOM orchestration step followed by the STO Snyk scan, the [SBOM tab](/docs/software-supply-chain-assurance/artifact-security/overview#sbom-tab) on the Artifacts page displays vulnerabilities for the components identified by Snyk. This helps you effectively identify and prioritize open source risks
168+
169+
164170
### Publish SBOM
165171

166172
After you run the SBOM Orchestration step, you can download or publish SBOM through multiple ways depending on your workflow:

docs/software-supply-chain-assurance/open-source-management/generate-sbom-for-repositories.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -129,6 +129,11 @@ This example **Deploy** stage has two steps:
129129

130130
</details>
131131

132+
133+
### View vulnerabilities in the SBOM
134+
135+
After you run the SBOM orchestration step followed by the STO Snyk scan, the [SBOM tab](/docs/software-supply-chain-assurance/artifact-security/overview#sbom-tab) on the Artifacts page displays vulnerabilities for the components identified by Snyk. This helps you effectively identify and prioritize open source risks
136+
132137
### Publish SBOM
133138

134139
After you run the SBOM Orchestration step, you can download or publish SBOM through multiple ways depending on your workflow:

0 commit comments

Comments
 (0)