NAME

SBOM::CycloneDX::Enum::ImpactAnalysisState - Impact Analysis State

SYNOPSIS

use SBOM::CycloneDX::Enum qw(IMPACT_ANALYSIS_STATE);
say IMPACT_ANALYSIS_STATE->RESOLVED_WITH_PEDIGREE;

use SBOM::CycloneDX::Enum::TlpCImpactAnalysisStatelassification qw(:all);
say EXPLOITABLE;

DESCRIPTION

SBOM::CycloneDX::Enum::ImpactAnalysisState is ENUM package used by SBOM::CycloneDX::Vulnerability::Analysis.

Declares the current state of an occurrence of a vulnerability, after automated or manual analysis.

CONSTANTS

  • RESOLVED, The vulnerability has been remediated.

  • RESOLVED_WITH_PEDIGREE, The vulnerability has been remediated and evidence of the changes are provided in the affected components pedigree containing verifiable commit history and/or diff(s).

  • EXPLOITABLE, The vulnerability may be directly or indirectly exploitable.

  • IN_TRIAGE, The vulnerability is being investigated.

  • FALSE_POSITIVE, The vulnerability is not specific to the component or service and was falsely identified or associated.

  • NOT_AFFECTED, The component or service is not affected by the vulnerability. Justification should be specified for all not_affected cases.

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-SBOM-CycloneDX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-SBOM-CycloneDX

git clone https://github.com/giterlizzi/perl-SBOM-CycloneDX.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2025-2026 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.