Skip to main content

ScaFindingDetail

No description

type ScaFindingDetail {
  affectedVersion: String!
  cve: String
  cvssMetric: String
  cvssScore: Float
  dependencyKind: SbomDependencyKind!
  dependencyPath: [SbomArtifact!]!
  fileName: String!
  id: ID!
  package: String!
  patchedVersion: String
  reachabilityAnalysis: ReachabilityAnalysis
  sbomArtifact: SbomArtifact
}

Fields​

ScaFindingDetail.affectedVersion ● String! non-null scalar​

The version of the package that is affected by the vulnerability

ScaFindingDetail.cve ● String scalar​

The Common Vulnerabilities and Exposures (CVE) identifier for the vulnerability

ScaFindingDetail.cvssMetric ● String scalar​

The CVSS (Common Vulnerability Scoring System) metric used for assessing the vulnerability's severity

ScaFindingDetail.cvssScore ● Float scalar​

The CVSS score indicating the severity of the vulnerability, ranging from 0 to 10

ScaFindingDetail.dependencyKind ● SbomDependencyKind! non-null enum​

Whether the vulnerable package is a direct or a transitive dependency. UNKNOWN when the SBOM carried no dependency graph, or when the finding matches no component or more than one

ScaFindingDetail.dependencyPath ● [SbomArtifact!]! non-null object​

Route from a root dependency down to the vulnerable component, root first. Empty when unknown

ScaFindingDetail.fileName ● String! non-null scalar​

The name of the file containing the vulnerable package

ScaFindingDetail.id ● ID! non-null scalar​

ScaFindingDetail.package ● String! non-null scalar​

The name of the package that contains the vulnerability

ScaFindingDetail.patchedVersion ● String scalar​

The version of the package where the vulnerability is fixed

ScaFindingDetail.reachabilityAnalysis ● ReachabilityAnalysis object​

Reachability analysis results

ScaFindingDetail.sbomArtifact ● SbomArtifact object​

The SBOM component this finding is about. Null when the finding cannot be tied to exactly one component

Member Of​

ScaFinding object

Contribute to the Docs

Found something outdated or missing? Help us improve the documentation with a quick suggestion or edit.

How to contribute

Resources

By exploring our content, you'll find resources that will enhance your understanding of the importance of a Security Application Program.

Conviso Blog: Explore our blog, which offers a collection of articles and posts covering a wide range of AppSec topics. The content on the blog is primarily in English.

Conviso's YouTube Channel: Access a wealth of informative videos covering various topics related to AppSec. Please note that the content is primarily in Portuguese.