Skip to main content

CISA minimum-elements scorecard

ansible_automation_orchestrator-2026.8.json

Back to SBOM

8 / 17 minimum elements fully met

1306 components enumerated by the document

SBOM metadata elements

Element Status What was found
SBOM Author met Red Hat Product Security (secalert@redhat.com)
SBOM Author Signature gap no embedded signature; authenticity cannot be verified
SBOM Data Format Name met spdx-json
SBOM Data Format Version met SPDX-2.3
SBOM Generation Context gap not declared
SBOM Timestamp met 2026-09-25T03:01:34.001321+00:00
SBOM Tool Name gap not declared
SBOM Tool Version gap not declared
SBOM Version met https://security.access.redhat.com/data/sbom/v1/spdx/ansible_automation_orchestrator-2026.8/2026-09-25/c4e6d70ebc6425f4727086cb5f20e7b5650bb0b2cda5da38b44da7eda902a7c2

Component data elements

Element Status What was found
Component Producer met 1306 of 1306 components
Component Name met 1306 of 1306 components
Component Version partial 1053 of 1306 components
Component Identifiers met 1306 of 1306 components
Component Hash Value gap 0 of 1306 components
Component Hash Algorithm gap 0 of 1306 components
Component License gap 0 of 1306 components
Component Dependency Relationship partial 1291 of 1306 components

Assessed against CISA, 2026 Minimum Elements for a Software Bill of Materials (SBOM), version 2.1, 29 July 2026. "unknown" means the producer explicitly declared the value unknown (NOASSERTION), which is different information from it being absent.