Viewing SBOM Parts

SBOM Management Manage SBOM Parts page provides a grid view of the SBOM parts across all buckets in your Organization and provides interactive elements that enable you to explore more details about the individual parts.

By default, the parts are listed in ascending order by the part name in the Part Name column. You can change this order to descending or choose to sort the list on the Bucket, Created, or Updated column instead.

To generate reports for SBOM parts in a selected bucket, refer to Generating SBOM Reports.

To view the current SBOM parts:

1. Open the Manage SBOM Parts page (SBOM Management > Manage SBOM Parts). The list of SBOM parts across all buckets in your Organization is displayed in a grid format.
2. Examine the list of SBOM parts. The following information is displayed for each part.

Column

Description

Part Name

The name of the SBOM part in componentName version (license) format. By default, the SBOM list is sorted in ascending alphabetical order on this column.

Bucket

The name of the bucket to which the SBOM part belongs.

You can sort the SBOM list alphabetically in ascending or descending order on this column.

Component

The hyperlinked component name and version for the SBOM part. Click the link to open the web page of a component’s third-party project or repository within the appropriate forge.

If the part was manually created without associating it a component instance that you selected, a hyphen (-) is displayed for the component version.

Licenses

The license(s) associated with the component version. (If available, the SPDX short name is shown for each license.)

Click the hyperlinked license name to view detailed information about the license in the Linux Foundation Projects SPDX license database.

If the part was manually created without associating it with a component instance that you selected, a hyphen (-) is displayed for the license.

Vulnerabilities

The Vulnerabilities bar graph listing the current counts of security vulnerabilities by severity level for component version. If no known vulnerabilities exist for the version (or this information cannot be obtained), a hyphen (-) is displayed. For more information about the color-coded severity levels, see Severity Levels for Security Vulnerabilities.

To view the list of vulnerabilities associated with the part, click anywhere on the bar graph. A slideout opens, listing the vulnerabilities and their details. See More About Security Vulnerabilities Associated with an SBOM Part.

Created

The date on which the SBOM part was created or imported in the system.

You can sort the SBOM list chronologically in ascending or descending order on this column.

Updated

The date on which the SBOM part was last updated in the system. If the part has not yet been updated, a hyphen (-) is displayed.

You can sort the SBOM list chronologically in ascending or descending order on this column.
3.  
4. To view more details for a specific part, click the menu icon at the end of the part row and select View Details. See Exploring Additional Details for an SBOM Part for a description of this information.
5. (Optional) If you want to search for a specific SBOM part, use the Advanced Search feature. See Performing and Managing Searches of SBOM Parts for details.
6. (Optional) If you want to manage an SBOM part from this page, do any of the following:
• To edit an SBOM part, continue with the instructions in Editing an SBOM Part, starting with step 3 in the section.
• To create another SBOM part, continue with the instructions in Creating SBOM Parts Manually. Start with step 3 in the section.