Bitnami
Bitnami package analysis and vulnerability scanning capabilities
Package analysis
| Cataloger + Evidence | Package URL Type | License | Dependencies | Package Manager Claims | ||||
|---|---|---|---|---|---|---|---|---|
| Depth | Edges | Kinds | Files | Digests | Integrity Hash | |||
bitnami-cataloger /opt/bitnami/.bitnami_components.json | pkg:bitnami | |||||||
bitnami-cataloger /opt/bitnami/**/.spdx-*.spdx | pkg:bitnami | Transitive | Complete | Runtime | ||||
Since all package data is gathered from SPDX SBOMs, the quality of the package analysis is dependent on the quality of the provided SBOMs.
Vulnerability scanning
| Data Source | Disclosures | Fixes | Track by Source Package | ||
|---|---|---|---|---|---|
| Affected | Date | Versions | Date | ||
| Bitnami Vulnerability Database | |||||