THE FIELD GUIDE / SECURITY & RESPONSE
Containers, application dependencies & SBOM
Attribute software components and advisories to the workloads that actually use them.
Identify workload and image instances
Inspect supported Docker and Podman workloads using stable runtime identities and immutable image digests. Connect images, containers, hosts and processes when evidence establishes the relationship.
Keep component types distinct
Read bounded Python, npm and JAR metadata where supported. Show host packages, image packages and application dependencies with source and collection time. Advisory matching follows verified ecosystem and version mappings, and unsupported runtimes or incomplete scans remain visible.
Export with provenance
Generate a software bill of materials with supported dependency relationships and package identities. Retain enough context to distinguish the same component across hosts, images and workload instances.
Open the application reference for capability scope and technical details.
Open View scope in issue #336 ↗