Criteria Fields for an SBOM Parts Search

Complete one or more of these fields on the Advanced SBOM Parts Search slideout to define criteria by which to filter the SBOM parts on the Manage SBOM Parts page. (The table also describes the buttons used to save and manage these searches as needed.)

Criteria Fields for an SBOM Parts Search

 

Field

Field

Search Settings

This set of criteria sets the basic search information—the search name and operation type.

Searches

(Optional) Select a saved search. Its criteria populates the window. Do any of the following:

• Perform the selected search. See Performing a Previously Saved SBOM Parts Search.
• Modify the selected search and save its changes (permissible only if you are the one who created the search). See Modifying a Previously Saved SBOM Parts Search.
• Create a new search by modifying the criteria in the selected search and saving the changes to a new search name. See Creating and Saving a New SBOM Parts Search.
• Delete the selected search (permissible only if you are the one who created the search). See Deleting a Previously Saved SBOM Parts Search.

And/Or

Select the And or Or operation, specifying the type of logic that will be applied between criteria during the search.

• And—AND logic is applied. An SBOM part must match all the criteria defined to be considered a match.
• Or—OR logic is applied. An SBOM part needs to match at least criterion defined to be considered a match.

General

This set of criteria identifies and describes the SBOM part.

 

Buckets

To filter to SBOM parts that belong to specific buckets, select one or more buckets from this dropdown list. The search applies OR logic to multiple bucket filters—that is, an SBOM part needs to at least one of the selected buckets to be considered a candidate in the search results. (To clear an individual bucket filter, click the x next to the filter; or to clear all bucket filters, click above the filter list.)

SBOM Part Name

Enter a string or term by which to search for an SBOM part name. This criteria is checked against SBOM part names to determine whether it matches a string within the name (or the exact name). Note that the search is case-insensitive and applies strict logic in the matching process. For example, if you enter apache ant, the search term is matched with the SBOM part “Apache Ant 1.7 (Apache-2.0)”, but not with the SBOM part “Apache Jakarta Ant 1.7 (Apache-2.0)”.

SBOM Part Age

Filter to those SBOM parts of a certain age. (Use the Custom Range option if none of the other options are suitable.)

• Any—Any age. (Default)
• Last 24 hours—Created within the last 24 hours.
• Last 7 days—Created within the last 7 days.
• Last 28 days—Created within the last 28 days.
• Choose Date Range—Created within a specified range of time. Click the Select Range icon to open a pop-up that lets you select the “from” and “to” dates on a calendar that shows two consecutive months at a time as you scroll through the months. Alternatively, select a Quick Filters option from the pop-up. Click Apply to set the date range.

If necessary, use the scroll button on your mouse to see the entire Select Range pop-up.

 

Package URL (PURL)

Enter a package URL to filter to those SBOM parts associated with the URL. You can enter a complete package URL or string within the URL. The value is case-insensitive.

License Name

Enter the name of a license to filter to those SBOM parts associated with that license. You can enter a complete license name or string within the name. The value is searched against a license’s full name, short name, SPDX identifier, and SPDX name.

Security Vulnerability

 

This set of criteria searches for SBOM parts associated with specific security vulnerabilities.

Security Vulnerability ID

Enter the ID of a specific security vulnerability to filter to those SBOM parts associated with that vulnerability. The value must be an exact ID match and contain no spaces.

Security Vulnerability Age

Filter to those SBOM parts associated with a security vulnerability of a certain age based on the vulnerability’s publication date. (Use the Custom Range option if none of the other options are suitable.)

• Any—Any age. (Default)
• Last 24 hours—Published within the last 24 hours.
• Last 7 days—Published within the last 7 days.
• Last 28 days—Published within the last 4 weeks.
• Choose Date Range—Published within a specified range of time. Click the Select Range icon to open a pop-up that lets you select the “from” and “to” dates on a calendar that shows two consecutive months at a time as you scroll through the months. Alternatively, select a Quick Filters option from the pop-up. Click Apply to set the date range.

If necessary, use the scroll button on your mouse to see the entire Select Range pop-up.

Security Vulnerability Severity

Select one or more security vulnerability severities to filter to those SBOM parts associated with vulnerabilities that have the selected severities.

If you select multiple severities, the search applies OR logic. That is, for an SOMB part to be considered a candidate in the search results, it must be associated with vulnerabilities that have at least one of the selected severities.