{% include '_design_system.html' %}
{% include "_default_logo.html" %}

CVE Component Evidence

Per-component CVEs and firmware file paths

Report: CVE Component Evidence | Generated: {{ generated_at | default('N/A') }} {% if project_filter %} | Project: {{ project_filter }}{% endif %} {% if metadata %} | Components: {{ metadata.transformed_count | default('N/A') }}{% endif %}
{% if transform_result and transform_result.evidence_summary %} {% set s = transform_result.evidence_summary %}
Total Components
{{ s.total_components }}
With Evidence Paths
{{ s.components_with_evidence }}
Without Evidence Paths
0 %}style="color: #ef6c00;"{% endif %}>{{ s.components_without_evidence }}
Findings Fetch Errors
0 %}style="color: #c62828;"{% endif %}>{{ s.findings_fetch_errors|default(0) }}
Evidence Fetch Errors
0 %}style="color: #c62828;"{% endif %}>{{ s.evidence_fetch_errors|default(0) }}
{% if (s.findings_fetch_errors|default(0)) > 0 %}
Warning: {{ s.findings_fetch_errors }} component(s) had their findings call fail. Those components are missing from the table below as if they had no CVEs. Re-run with the same --cache-ttl to retry only the failed components.
{% endif %} {% endif %}

Components with Match Evidence

Each row is a component in the selected project version, with associated CVE IDs and the firmware file paths where the component was detected.

{% if data %} {% for row in data[:2000] %} {% endfor %} {% if data|length > 2000 %} {% endif %}
Name Version CDX Type Supplier Findings (C/H/M/L) policy violations policy warnings Licenses Source CVEs Evidence File Paths
{{ row['Name'] }} {{ row['Version'] }} {{ row.get('CDX Type', '') }} {{ row.get('Supplier', '') }} {{ row.get('Findings - critical', 0) }} / {{ row.get('Findings - high', 0) }} / {{ row.get('Findings - medium', 0) }} / {{ row.get('Findings - low', 0) }} {{ row.get('policy - violations', 0) }} {{ row.get('policy - warnings', 0) }} {{ row.get('Licenses - names', '') }} {{ row.get('Source', '') }} {{ row.get('CVEs', '') }} {{ row.get('Evidence File Paths', '') }}
Showing 2,000 of {{ data|length }} rows. See CSV/XLSX export for full data.
{% else %}

No components found

No components matched the selected project version. Confirm --version refers to a version of --project.

{% endif %}
{% include "_default_footer.html" %}