SbomDependencyGraph

A slice of one asset+branch dependency graph, ready to render

type SbomDependencyGraph {
  dependencyGraphAvailable: Boolean!
  edges: [SbomDependencyEdge!]!
  nodes: [SbomArtifact!]!
  totalNodes: Int!
  truncated: Boolean!
}

Fields

SbomDependencyGraph.dependencyGraphAvailable ● Boolean! non-null scalar

False when the tool that generated this SBOM supplied no dependency graph. The graph is empty because the data never existed, not because the asset has no components

SbomDependencyGraph.edges ● [SbomDependencyEdge!]! non-null object

Relations between the returned nodes

SbomDependencyGraph.nodes ● [SbomArtifact!]! non-null object

Components in the returned slice

SbomDependencyGraph.totalNodes ● Int! non-null scalar

Size of the reachable graph before any cap was applied, so the client can say 'showing N of M'. Read it together with dependencyGraphAvailable: when that is false there is no reachable graph and this instead reports how many components the inventory holds that could not be related — nodes is empty because the data never existed, not because the result was clipped

SbomDependencyGraph.truncated ● Boolean! non-null scalar

True when a node, depth or argument cap clipped the result. The returned slice is then incomplete

Member Of

Asset object