Feature Requests

After doing a SBOM orchestration and trivy scan, the portal UI shows the SBOM OSS Risk field, but when downloading the sbom, this field is not available, nor does there seem to be a GET api call for this.

Our firm has our own vulnerability score for licensing. We want our firm's vulnerability score/risk to populate in the supply chain dashboards and other Harness modules where licensing risk is displayed.

One use case for an SBOM we would like to see on Harness is the ability to query a specific dependency and be able to see all applications that are using this depedency. If something like a day 0 vulnerability appears in a dependency, then we will be able to flag all applications that are using it. Note: This feature would be best suited to be in the Supply Chain Security module, but since that was not an option above, the Security Testing Orchestration module is the closest one.