Vulnerabilities
Review SBOM-backed vulnerability findings in Craftifact, use prioritization signals to focus triage, and record time-bound suppressions with their justification.
Craftifact maps known vulnerabilities to the components and artifacts they affect.
Findings can be prioritized with scanner severity, CISA KEV, and EPSS signals. Suppressions can be created, renewed, or revoked where a risk is already accepted.
Vulnerability findings
- Review vulnerabilities and affected components for an artifact or OCI digest
- Create, renew, and revoke suppressions where the risk is already accepted