NAME

SBOM::CycloneDX::Enum::ImpactAnalysisJustification - Impact Analysis Justification

SYNOPSIS

use SBOM::CycloneDX::Enum qw(IMPACT_ANALYSIS_JUSTIFICATION);
say IMPACT_ANALYSIS_STATE->REQUIRES_DEPENDENCY;

use SBOM::CycloneDX::Enum::ImpactAnalysisJustification qw(:all);
say PROTECTED_AT_RUNTIME;

DESCRIPTION

SBOM::CycloneDX::Enum::ImpactAnalysisJustification is ENUM package used by SBOM::CycloneDX::Vulnerability::Analysis.

The rationale of why the impact analysis state was asserted

CONSTANTS

  • CODE_NOT_PRESENT, The code has been removed or tree-shaked.

  • CODE_NOT_REACHABLE, The vulnerable code is not invoked at runtime.

  • REQUIRES_CONFIGURATION, Exploitability requires a configurable option to be set/unset.

  • REQUIRES_DEPENDENCY, Exploitability requires a dependency that is not present.

  • REQUIRES_ENVIRONMENT, Exploitability requires a certain environment which is not present.

  • PROTECTED_BY_COMPILER, Exploitability requires a compiler flag to be set/unset.

  • PROTECTED_AT_RUNTIME, Exploits are prevented at runtime.

  • PROTECTED_AT_PERIMETER, Attacks are blocked at physical, logical, or network perimeter.

  • PROTECTED_BY_MITIGATING_CONTROL, Preventative measures have been implemented that reduce the likelihood and/or impact of the vulnerability.

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-SBOM-CycloneDX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-SBOM-CycloneDX

git clone https://github.com/giterlizzi/perl-SBOM-CycloneDX.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2025-2026 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.