## `asbom_filtered` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `logical_app` | Product | STRING | | True | | `base_layer` | Base Image | BOOLEAN | is dependency coming from a an image layer that is a known base layer | True | | `component_publisher` | Component Publisher | STRING | | True | | `component_description` | Component Description | STRING | | True | | `tools` | Tools | STRING | | True | | `licenses` | Licenses | STRING | | True | | `latest_version` | Dep latest ver | STRING | | True | | `high_severity_cves` | C+H Vulns | INTEGER | | True | | `license_is_permissive` | Is permissive | BOOLEAN | | True | | `scorecard_score` | OpenSSF score | FLOAT | | True | | `targets` | SBOM Type | STRING | | True | | `component_type` | Component type | STRING | | True | | `tag` | Component version | STRING | | True | | `component_version` | Dep version | STRING | | True | | `maintenance_score_int` | Maintenance Score | INTEGER | | True | | `license_expression` | Licesne expression | STRING | | True | | `pkg` | Package Manager | STRING | | True | | `rstatus` | Version Status | STRING | | True | | `version_is_up_to_date` | Up-to-date | BOOLEAN | | True | | `maintenance_score` | -- | STRING | | True | | `component_dependency_type` | Component Dependency Type | STRINGARRAY | | True | | `targetName` | Component | STRING | | True | | `labels` | Labels | STRING | | True | | `component_purl` | PURL | STRING | | True | | `source_layer` | Layer | STRING | | True | | `logical_app_version` | Version | STRING | | True | | `component_name` | Component Name | STRING | | True | | `component_group` | Component Group | STRING | | True | | `attestation_ids` | Attestation Ids | LONGINTEGERARRAY | | True | | `dependency_parents` | Dependency Parents | STRINGARRAY | | True | | `dependency_children` | Dependency Children | STRINGARRAY | | True | | `license_is_permissive_na` | License Is Permissive Na | BOOLEAN | | True | | `version_timestamp` | Version Timestamp | DATETIMETZ | | True | | `component_locations` | Component Locations | JSONB | | True | | `scorecard_id` | Scorecard Id | LONGINTEGER | | True | | `attestation_ids_cnt` | Attestation Ids Cnt | INTEGER | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `pipeline_run_id` | Pipeline Run Id | LONGINTEGER | | True | | `product_id` | Product Id | LONGINTEGER | | True | | `component_id` | Component Id | LONGINTEGER | | True | | `id` | Id | LONGINTEGER | | True | | `component_external_ref` | Component External Ref | STRING | | True | | `license_expression_na` | License Expression Na | STRING | | True | | `attestation_name` | Attestation Name | STRING | | True | | `component_author` | Component Author | STRING | | True | | `more` | | | | True | | `block` | Dependency | | | True | | `relation` | Relation | | | True | | `targets_translated` | SBOM Type Translated | | | True | | `main_tool` | Main Tool | | | True | ## `API Attestations` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `logical_app` | Product | STRING | | True | | `logical_app_version` | Version | STRING | | True | | `published` | Published | BOOLEAN | | True | | `deleted` | Deleted | BOOLEAN | | True | | `attestation_timestamp` | Attestation Timestamp | DATETIMETZ | | True | | `context_elements` | Context Elements | JSONB | | True | | `context` | Context | JSONB | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `attestation_id` | Attestation Id | LONGINTEGER | | True | | `version_rank` | Version Rank | LONGINTEGER | | True | | `deeplink` | Deeplink | STRING | | True | | `targetName` | Targetname | STRING | | True | | `sigStatus` | Sigstatus | STRING | | True | | `targetType` | Targettype | STRING | | True | | `contentType` | Contenttype | STRING | | True | | `contextType` | Contexttype | STRING | | True | | `job_name` | Job Name | STRING | | True | | `image_id` | Image Id | STRING | | True | | `run_id` | Run Id | STRING | | True | | `license` | License | STRING | | True | ## `CVE Impact v2` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `is_latest_logical_version` | Latest product version | BOOLEAN | | True | | `has_kev` | Has KEV | BOOLEAN | | True | | `has_fix` | Has Fix | BOOLEAN | | True | | `version_timestamp` | Version timestamp | DATETIMETZ | | True | | `advisory_text` | Advisory Text | STRING | | True | | `component_id` | Component ID | LONGINTEGER | | True | | `cvss_version` | CVSS Version | STRING | | True | | `vector` | CVSS Vector | STRING | | True | | `tag` | Component Version | STRING | | True | | `version_id` | Version ID | LONGINTEGER | | True | | `product_id` | Product ID | LONGINTEGER | | True | | `component_version` | Dependency Version | STRING | | True | | `pkg` | Package Mgr | STRING | | True | | `rstatus` | Version Status | STRING | | True | | `cvss_score` | CVSS | FLOAT | | True | | `vul_component_created` | Discovered | DATETIMETZ | | True | | `vul_published_on` | Published | DATETIMETZ | | True | | `epssProbability` | EPSS | FLOAT | | True | | `cwes` | CWEs | JSONB | | True | | `vulnerability_id` | ID | STRING | | True | | `component_name` | Dependency | STRING | | True | | `component_purl` | PURL | STRING | | True | | `source_layer` | Layer | STRING | | True | | `labels` | Labels | STRING | | True | | `logical_app` | Product | STRING | | True | | `vul_hyperlinks` | References | STRING | | True | | `vul_source` | Source | STRING | | True | | `tool` | Tool | STRING | | True | | `logical_app_version` | Version | STRING | | True | | `attestation_ids` | Attestation Ids | LONGINTEGERARRAY | | True | | `vul_component_fixed_in_versions` | Vul Component Fixed In Versions | STRINGARRAY | | True | | `component_dependency_type` | Component Dependency Type | STRINGARRAY | | True | | `adv_names` | Adv Names | STRINGARRAY | | True | | `adv_sources` | Adv Sources | STRINGARRAY | | True | | `published` | Published | BOOLEAN | | True | | `epssScoreDate` | Epssscoredate | DATETIMETZ | | True | | `vul_date_changed` | Vul Date Changed | DATETIMETZ | | True | | `epssPercentile` | Epsspercentile | FLOAT | | True | | `dependency_analysis` | Dependency Analysis | JSONB | | True | | `id` | Id | LONGINTEGER | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `vul_adv_id` | Vul Adv Id | LONGINTEGER | | True | | `pipeline_run_id` | Pipeline Run Id | LONGINTEGER | | True | | `latest_count` | Latest Count | LONGINTEGER | | True | | `targets` | Targets | STRING | | True | | `latest_package_version` | Latest Package Version | STRING | | True | | `base_severity_string` | Base Severity String | STRING | | True | | `attestation_name` | Attestation Name | STRING | | True | | `component_locations` | Component Locations | STRING | | True | | `main_tool` | Main Tool | STRING | | True | | `direct_cwes` | Direct Cwes | STRING | | True | | `severity_string` | Severity String | STRING | | True | | `more` | Details | | | True | | `block` | Vulnerability | STRING | | True | | `id_tooltip` | ID | | | True | | `targetName` | Component | STRING | | True | | `severity` | Severity | INTEGER | | True | | `funnel_step` | Funnel Step | STRING | | True | | `Layer` | Layer | | | True | | `relation` | Relation | | | True | | `link` | Advisory | | | True | | `SEV_L` | Low | | | True | | `vul_severity_string` | Severity | | | True | | `SEV_C` | Critical | NUMERIC | | True | | `SEV_M` | Medium | | | True | | `SEV_H` | High | | | True | ## `endoflife_250326` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `lts` | LTS Date | DATETIMETZ | LTS date: The last date until which a product is guaranteed extended support. | True | | `eol` | EOL Date | DATETIMETZ | EOL date: The date after which a product is considered unsupported. | True | | `releaseDate` | Release Date | DATETIMETZ | | True | | `support` | Support Date | DATETIMETZ | | True | | `link` | Info URL | STRING | | True | | `latest` | Latest Version | STRING | | True | | `cycle` | Cycle | STRING | | True | | `product` | Product | STRING | | True | | `teamId` | Teamid | LONGINTEGER | | True | ## `FSTracker Event Data` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `mainAttestation_timestamp` | Mainattestation Timestamp | DATETIMETZ | | True | | `event_time` | Event Time | DATETIME | | True | | `mainAttestation` | Mainattestation | LONGINTEGER | | True | | `context` | Context | JSONB | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `pipelineRun_id` | Pipelinerun Id | LONGINTEGER | | True | | `event_id` | Event Id | LONGINTEGER | | True | | `targetName` | Targetname | STRING | | True | | `pipelineRun` | Pipelinerun | STRING | | True | | `targetType` | Targettype | STRING | | True | | `contentType` | Contenttype | STRING | | True | | `contextType` | Contexttype | STRING | | True | | `cmd_line` | Cmd Line | STRING | | True | | `process_environment` | Process Environment | STRING | | True | | `event_environment` | Event Environment | STRING | | True | | `event_type` | Event Type | STRING | | True | | `executable` | Executable | STRING | | True | | `action` | Action | STRING | | True | | `path` | Path | STRING | | True | | `process` | Process | STRING | | True | | `user` | User | STRING | | True | ## `ProcessesData` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `created` | Created | DATETIME | | True | | `mainAttestation` | Mainattestation | LONGINTEGER | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `id` | Id | LONGINTEGER | | True | | `cmd_line` | Cmd Line | STRING | | True | | `process_id` | Process Id | STRING | | True | | `work_dir` | Work Dir | STRING | | True | | `mnt_ns` | Mnt Ns | STRING | | True | | `executable` | Executable | STRING | | True | | `tracing` | Tracing | STRING | | True | | `parent` | Parent | STRING | | True | | `cgroup` | Cgroup | STRING | | True | | `pid` | Pid | STRING | | True | | `environment` | Environment | STRING | | True | | `user` | User | STRING | | True | ## `Findings` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `more` | | | | True | | `severity_order` | Severity Order | STRING | | True | | `attack_vector` | Attack Vector | | | True | | `availability_impact` | Availability Impact | | | True | | `confidentiality_impact` | Confidentiality Impact | | | True | | `integrity_impact` | Integrity Impact | | | True | | `Severity` | Severity | | | True | | `attack_complexity` | Attack Complexity | | | True | | `attestation_id` | Evidence ID | LONGINTEGER | | True | | `cvssv3` | CVSSv3 | STRING | | True | | `created` | Created | DATETIMETZ | | True | | `cwe_id` | CWE | STRING | | True | | `targetName` | Component | STRING | | True | | `id` | ID | LONGINTEGER | | True | | `component_name` | Dependency | STRING | | True | | `description` | Description | STRING | | True | | `line` | Line | INTEGER | | True | | `severity` | Severity | INTEGER | | True | | `parser` | Parser | STRING | | True | | `logical_app` | Product | STRING | | True | | `file_path` | Path | STRING | | True | | `severity_string` | Severity | STRING | | True | | `main_tool` | Tool | STRING | | True | | `title` | Title | STRING | | True | | `logical_app_version` | Version | STRING | | True | | `finding` | Finding | JSONB | | True | | `context` | Context | JSONB | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `original_attestation_id` | Original Attestation Id | LONGINTEGER | | True | | `product_id` | Product Id | LONGINTEGER | | True | | `pipeline_id` | Pipeline Id | LONGINTEGER | | True | ## `License per dependency` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `targetTypeTranslated` | Comp type translated | | | True | | `license` | License | STRING | individual license | True | | `license_expression` | License Exp. | STRING | | True | | `license_is_permissive` | Is Permissive | BOOLEAN | | True | | `targetType` | Comp type | STRING | | True | | `component_version` | Dependency Version | STRING | | True | | `group` | Package Mgr | STRING | | True | | `rstatus` | Version Status | STRING | | True | | `targetName` | Component | STRING | | True | | `component_name` | Dependency | STRING | | True | | `logical_app` | Product | STRING | | True | | `logical_app_version` | Version | STRING | | True | | `License2` | License2 | | | True | | `latest` | Latest | BOOLEAN | | True | | `teamId` | Teamid | LONGINTEGER | | True | ## `extended_lineage_new` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `prent_bloack` | Parent | | | True | | `more` | More | | | True | | `asset_block` | Asset | | | True | | `g-source` | G-Source | STRING | | True | | `g-target` | G-Target | STRING | | True | | `tooltip` | Tooltip | STRING | | True | | `parent_external_id` | Parent External ID | STRING | | True | | `product_id` | Product ID | LONGINTEGER | | True | | `external_id` | External ID | STRING | | True | | `parent_name` | Parent Name | STRING | | True | | `parent_type` | Parent Type | STRING | | True | | `platform_type` | Platform Type | STRING | | True | | `timestamp` | Updated | DATETIME | | True | | `asset_name` | Asset | STRING | | True | | `properties` | Info | JSONB | | True | | `uri` | URI | STRING | | True | | `owner` | Owner | STRING | | True | | `platform_name` | Platform | STRING | | True | | `logical_app` | Product | STRING | | True | | `path` | Path | STRING | | True | | `asset_type` | Type | STRING | | True | | `logical_app_version` | Version | STRING | | True | | `parent_id` | Parent Id | LONGINTEGER | | True | | `child_id` | Child Id | LONGINTEGER | | True | | `version_id` | Version Id | LONGINTEGER | | True | | `teamId` | Teamid | INTEGER | | True | ## `policy_initiative` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `is_latest_logical_version` | Latest Product Version | BOOLEAN | | True | | `asset` | Asset (Type) | STRING | | True | | `control_name` | Policy Control | STRING | | True | | `initiative_hash` | Initiative Hash | STRING | | True | | `initiative_name` | Policy Initiative | STRING | | True | | `rule_name` | Policy Rule | STRING | | True | | `time_evaluated` | Time | DATETIMETZ | | True | | `date` | Evaluated | DATE | | True | | `count` | Count | LONGINTEGER | | True | | `message` | Message | STRING | | True | | `logical_app` | Product | STRING | | True | | `logical_app_version` | Version | STRING | | True | | `formatted_msg` | Formatted Msg | STRING | | True | | `more_json` | More Json | JSONB | | True | | `evaluations` | Evaluations | JSONB | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `product_id` | Product Id | LONGINTEGER | | True | | `version_id` | Version Id | LONGINTEGER | | True | | `asset_name` | Asset Name | STRING | | True | | `asset_id` | Asset Id | STRING | | True | | `gate_type` | Gate Type | STRING | | True | | `asset_type` | Asset Type | STRING | | True | | `rule_id` | Rule Id | STRING | | True | | `status` | Status | STRING | | True | | `status_icon` | Status | | | True | | `details` | Details | | | True | | `gate` | Gate (Type) | STRING | | True | | `gate_name` | Gate Name | STRING | | True | ## `product_risk_1.0` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `totals_badge` | Totals | STRING | | True | | `logical_app_badges` | Info | STRING | | True | | `target_badges` | Info | STRING | | True | | `cve_badges` | Info | STRING | | True | | `logical_app` | Product | STRING | Name of Product in ScribeHub. A product is made of components (e.g. a few docker images) | True | | `has_fix` | Has Fix | BOOLEAN | True if there is a fix for this vulnerability (usually an udate for the vulnerable dependency) | True | | `weighted_cve_risk` | Weighted Cve Risk | DECIMAL | Risk imposed by the CVE, taking into account weights (business criticality, public facing, publicly available) | True | | `total_cves_in_base_image` | Total Cves In Base Image | DECIMAL | Total number of CVEs that are in a base image, across the team | True | | `in_base_image` | In Base Image | BOOLEAN | True if the vulnerability is in the base layer of a Docker image | True | | `total_fixables` | Total Fixables | DECIMAL | Total number of CVEs with a fix in the team | True | | `weight` | Weight | FLOAT | the is the accumulated weight for this Componen (Target) | True | | `has_kev` | Has Kev | BOOLEAN | True if this CVE is a Known Exploitable Vulnerability | True | | `target_risk` | Component Risk | DECIMAL | Total risk for this component of the product | True | | `logical_app_version_cves_in_base_image` | Logical App Version Cves In Base Image | DECIMAL | Total CVEs in base image for this product version | True | | `total_risk` | Total Risk | DECIMAL | Total risk for this team (across all product-versions) | True | | `total_exploitables` | Total Exploitables | DECIMAL | Total number of exploitable CVEs in the team | True | | `target_fixables` | Target Fixables | LONGINTEGER | Number of fixable risky CVEs of the component | True | | `target` | Component | STRING | The component (usually a Docker image name:tag) | True | | `logical_app_version_risk` | Product Risk | DECIMAL | Total risk for this Product Version | True | | `logical_app_version_fixables` | Logical App Version Fixables | DECIMAL | Number of Fixable CVEs in the product-version | True | | `logical_app_version_exploitables` | Logical App Version Exploitables | DECIMAL | Number of exploitable CVEs in the Product-Version | True | | `target_cves_in_base_image` | Target Cves In Base Image | LONGINTEGER | Number of CVEs in Component Base Image | True | | `target_exploitables` | Target Exploitables | LONGINTEGER | Number of Exploitable CVEs in the component | True | | `vulnerability_id` | CVE ID | STRING | CVE ID for this line | True | | `num_targets` | Num Targets | LONGINTEGER | Number of Components in the Product | True | | `teamId` | Teamid | LONGINTEGER | ID of the team within Scribe | True | | `logical_app_version` | Version | STRING | Version of Product in ScribeHub | True | | `total_completion` | Safe | | | True | ## `MARKETING Team activity` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `teamName` | Team name | STRING | | True | | `autoProvisioningCustomerSource` | Provisioned-by | STRING | | True | | `lastAccess` | Lastaccess | DATETIMETZ | | True | | `created` | Created | DATETIMETZ | | True | | `date` | Date | DATE | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `attestations` | Attestations | LONGINTEGER | | True | | `invites` | Invites | LONGINTEGER | | True | | `versions` | Versions | LONGINTEGER | | True | | `hubspotEmail` | Hubspotemail | STRING | | True | | `lead` | Lead | STRING | | True | | `email` | Email | STRING | | True | ## `API Vulnerabilities` Columns | Column Name | Label | Type | Description | Like-compliant | |-------------|-------|------|-------------|----------------| | `cwe_array` | CWEs | | | True | | `dependency_analysis` | Dependency Analysis | JSONB | Details on how the dependency was introduced: direct or transitive (dependent library of a library), through source (e.g. package.json) or image (e.g. Dockerfile) | True | | `advisory_link` | Advisory | | | True | | `has_fix` | Has Fix | BOOLEAN | | True | | `vul_component_fixed_in_versions` | Vulnerability Fix Version | STRINGARRAY | | True | | `will_not_fix` | Will Not Fix | BOOLEAN | | True | | `is_latest_logical_version` | Latest product version | BOOLEAN | | True | | `vul_date_changed` | Vulnerability Last Change | DATETIMETZ | | True | | `latest_package_version` | Dependency Latest Version | STRING | | True | | `attestation_ids` | Attestation IDs | LONGINTEGERARRAY | | True | | `cpes` | Dependency CPEs | STRINGARRAY | | True | | `advisory_modified` | Advisory Modified | DATETIMETZ | | True | | `hyper_links` | Hyper Links | STRINGARRAY | | True | | `has_kev` | Has KEV | BOOLEAN | | True | | `base_score` | Base Score | FLOAT | | True | | `vul_component_created` | Dependency Date | DATETIMETZ | | True | | `version_timestamp` | Version Timestamp | DATETIMETZ | | True | | `advisory_justification` | Advisory Justification | STRING | | True | | `attestation_name` | Attestation Name | STRING | | True | | `advisory_status` | Advisory Status | STRING | | True | | `advisory_text` | Advisory Text | STRING | | True | | `tag` | Component Version | STRING | | True | | `component_id` | Dependency ID | LONGINTEGER | | True | | `component_purl` | Dependency PURL | STRING | | True | | `component_locations` | Dependency Locations | STRING | | True | | `component_version` | Dependency Version | STRING | | True | | `final_severity` | Final Severity | INTEGER | | True | | `severity` | Original Severity | INTEGER | | True | | `main_tool` | Main Tool | STRING | | True | | `cvss_score` | CVSS | FLOAT | | True | | `vul_published_on` | Published | DATETIMETZ | | True | | `epssProbability` | EPSS | FLOAT | | True | | `cwes` | CWE_Object | JSONB | | True | | `vendor` | Vendor | JSONB | | True | | `targetName` | Component | STRING | | True | | `vulnerability_id` | ID | STRING | | True | | `component_name` | Dependency | STRING | | True | | `product_id` | Product Id | LONGINTEGER | | True | | `source_layer` | Layer | STRING | | True | | `labels` | Labels | STRING | | True | | `logical_app` | Product | STRING | | True | | `vul_hyperlinks` | References | STRING | | True | | `vul_source` | Source | STRING | | True | | `targets` | Targets | STRING | | True | | `text` | Text | STRING | | True | | `tool` | Tool | STRING | | True | | `logical_app_version` | Version | STRING | | True | | `vector` | Vector | STRING | | True | | `component_dependency_type` | Component Dependency Type | STRINGARRAY | | True | | `update` | Update | BOOLEAN | | True | | `epssScoreDate` | Epssscoredate | DATETIMETZ | | True | | `epssPercentile` | Epsspercentile | FLOAT | | True | | `teamId` | Teamid | LONGINTEGER | | True | | `vul_adv_id` | Vul Adv Id | LONGINTEGER | | True | | `pipeline_run_id` | Pipeline Run Id | LONGINTEGER | | True | | `id` | Id | LONGINTEGER | | True | | `base_severity_string` | Base Severity String | STRING | | True | | `severity_string` | Severity String | STRING | | True | | `pkg` | Pkg | STRING | | True |