Chapter 2 · SBOM & Dependencies › Vulnerability scan flow
Software EngineerCompliance Officer

Vulnerability scan flow

Database sync, matching, and triage workflow

Scan triggeredNightly or manual Match depsCPE + ecosystem Findings?Interchange Status: OpenNotification sent Triage5-status workflow ENISA?If exploited → CleanNo new findings DB sync1 AM daily Main journey Error / branch Feeder Next process Interchange
Click any station to see instructions for that step
🗺️

Select a station to begin

Click any station on the map above to read the instructions for that step.