1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
<?xml version="1.0" ?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.5" serialNumber="urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac" version="1">
<metadata>
<timestamp>2023-01-07T13:44:32.312678+00:00</timestamp>
</metadata>
<properties>
<property name="key1">val1</property>
<property name="key2">val2</property>
</properties>
<vulnerabilities>
<vulnerability bom-ref="vuln-with-CODE_NOT_PRESENT">
<id>vuln-with-CODE_NOT_PRESENT</id>
<analysis>
<justification>code_not_present</justification>
</analysis>
</vulnerability>
<vulnerability bom-ref="vuln-with-CODE_NOT_REACHABLE">
<id>vuln-with-CODE_NOT_REACHABLE</id>
<analysis>
<justification>code_not_reachable</justification>
</analysis>
</vulnerability>
<vulnerability bom-ref="vuln-with-PROTECTED_AT_PERIMITER">
<id>vuln-with-PROTECTED_AT_PERIMITER</id>
<analysis>
<justification>protected_at_perimeter</justification>
</analysis>
</vulnerability>
<vulnerability bom-ref="vuln-with-PROTECTED_AT_RUNTIME">
<id>vuln-with-PROTECTED_AT_RUNTIME</id>
<analysis>
<justification>protected_at_runtime</justification>
</analysis>
</vulnerability>
<vulnerability bom-ref="vuln-with-PROTECTED_BY_COMPILER">
<id>vuln-with-PROTECTED_BY_COMPILER</id>
<analysis>
<justification>protected_by_compiler</justification>
</analysis>
</vulnerability>
<vulnerability bom-ref="vuln-with-PROTECTED_BY_MITIGATING_CONTROL">
<id>vuln-with-PROTECTED_BY_MITIGATING_CONTROL</id>
<analysis>
<justification>protected_by_mitigating_control</justification>
</analysis>
</vulnerability>
<vulnerability bom-ref="vuln-with-REQUIRES_CONFIGURATION">
<id>vuln-with-REQUIRES_CONFIGURATION</id>
<analysis>
<justification>requires_configuration</justification>
</analysis>
</vulnerability>
<vulnerability bom-ref="vuln-with-REQUIRES_DEPENDENCY">
<id>vuln-with-REQUIRES_DEPENDENCY</id>
<analysis>
<justification>requires_dependency</justification>
</analysis>
</vulnerability>
<vulnerability bom-ref="vuln-with-REQUIRES_ENVIRONMENT">
<id>vuln-with-REQUIRES_ENVIRONMENT</id>
<analysis>
<justification>requires_environment</justification>
</analysis>
</vulnerability>
</vulnerabilities>
</bom>
|
