Explore Your SBOM

All the SBOMs that you generate show up in the Projects page. Depending on the type of input used to generate the SBOM, SBOM generation may take some time to complete (typically, one minute for small SBOMs and up to 30 min for larger ones).

The status of the SBOM in the Projects page is an indication of the progress in SBOM generation. It starts from Created, then Running and other states and finally show up as Ready for Review.

You can click on the SBOM when it’s in Ready for Review state and explore the SBOM. The data collected for the SBOM is organized into several tabs:

• Info tab

• Attestation tab

• Dependencies tab

• Provenance tab

• Vulnerabilities tab

• Mitigations tab

• Security posture tab

• Code quality tab

• Suppliers and Licenses tab

• Findings tab