Skip to main content

CISA minimum-elements scorecard

rhn_satellite_6.17.json

Back to SBOM

8 / 17 minimum elements fully met

1089 components enumerated by the document

SBOM metadata elements

Element Status What was found
SBOM Author met Red Hat Product Security (secalert@redhat.com)
SBOM Author Signature gap no embedded signature; authenticity cannot be verified
SBOM Data Format Name met spdx-json
SBOM Data Format Version met SPDX-2.3
SBOM Generation Context gap not declared
SBOM Timestamp met 2026-07-26T03:31:25.531337+00:00
SBOM Tool Name gap not declared
SBOM Tool Version gap not declared
SBOM Version met https://security.access.redhat.com/data/sbom/v1/spdx/rhn_satellite_6.17/2026-07-26/c318f062e939ab2b8d59aefe08f7f85b00cbc475e5ab0cb381e438f57477cebc

Component data elements

Element Status What was found
Component Producer met 1089 of 1089 components
Component Name met 1089 of 1089 components
Component Version partial 1087 of 1089 components
Component Identifiers met 1089 of 1089 components
Component Hash Value gap 0 of 1089 components
Component Hash Algorithm gap 0 of 1089 components
Component License gap 0 of 1089 components
Component Dependency Relationship partial 791 of 1089 components

Assessed against CISA, 2026 Minimum Elements for a Software Bill of Materials (SBOM), version 2.1, 29 July 2026. "unknown" means the producer explicitly declared the value unknown (NOASSERTION), which is different information from it being absent.