The safeguards map / 1.1 Code and dependencies
CVE Binary Tool
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
Finds known vulnerabilities in software by scanning binaries and component lists such as SBOMs against public vulnerability data, and can generate VEX documents.
Where it sits
1.1 Code and dependencies (primary): Scans binaries and lists of components, including SBOMs, for known vulnerabilities using public vulnerability data, and can run in a continuous integration system.
The CVE Binary Tool is a free, open source tool to help you find known vulnerabilities in software
captured
It is intended to be used as part of your continuous integration system to enable regular vulnerability scanning
captured
A binary scanner which helps you determine which packages may have been included as part of a piece of software.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make itthose who run it
- Runs
- by handin CI
Handoffs
consumes Software and AI inventory: SPDX, CycloneDX
produces Vulnerability status: CSAF, CycloneDX and OpenVEX VEX
Collector's note
The tool also lists SWID among the SBOM types it reads.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.