Software Bill of Materials
sbom
The Software Bill of Materials object describes characteristics of a generated SBOM.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Created Time | created_time |
Timestamp | The time when the SBOM was created. |
| Created Time | created_time_dt |
Datetime | The time when the SBOM was created. |
| Software Package | package |
Software Package[] | The device software that is being discovered by an inventory process. |
| Product | product |
Product[] | The product that generated the SBOM e.g. cdxgen or Syft. |
| Raw Data | raw_data |
String | The raw event/finding data as received from the source. |
| Record ID | record_id |
String | Unique identifier for the object |
| Software Components | software_components |
Software Component[] | The list of software components used in the software package. |
| Unmapped Data | unmapped |
Object[] | The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source. |
Relationships
Inbound Relationships
These objects and events reference Software Bill of Materials in their attributes:
Outbound Relationships
Software Bill of Materials references the following objects and events in its attributes:
This page describes qdm-1.4.0+ocsf-1.4.0
Updated 5 days ago