OASIS Static Analysis Results Interchange Format (SARIF) TC

 View Only
Back to discussions
Expand all | Collapse all

Fwd: Action Item for SBOM finding justification types

  • 1.  Fwd: Action Item for SBOM finding justification types

    Posted 12-12-2024 11:18
    Resharing with the rest of the team through email.

    Best,
    Thanassis

    ---------- Forwarded message ---------
    From: Thanassis Avgerinos <thanassis.avgerinos@gmail.com>
    Date: Thu, Dec 12, 2024 at 10:47 AM
    Subject: Action Item for SBOM finding justification types
    To: David Keaton <dmk@dmk.com>
    Cc: <stefan@hagen.link>


    Good morning/afternoon David and Stefan,

    I had an action item to report on possible "resolution types" for SBOM-identified findings and I would like to link to the work we've been doing with one of our partners (GameWarden) and the classification used for thousands (possibly millions) of SBOM findings:


    The list includes a little over 10 categories that can be condensed to fewer depending on needs, but is fairly inclusive. It is probably a good reference point if we were to categorize resolution types.

    I wanted to send this message to the mailing list but I believe we recently migrated and I wasn't sure what was the right email address to use.

    Thank you,
    Thanassis


Related Content