Export Violation Data

Threat Level

The threat level associated with the policy violation, on a scale of 0 to 10

Policy Name

The name of the policy that triggered the violation

Organization Name

Name of the organization which owns the violated policy, or is the parent of the application in which the policy was violated

Application Name

Name of the application in which the policy violation was triggered

Component Name

Name of the component in which the policy violation was triggered

Date First Seen

Date in which this policy violation was first triggered for the particular component. This date is represented in ISO 8601 format.

This date indicates the date of the policy evaluation when this violation was first detected. If a previously reported violation is remediated (or waived), but is seen again in a policy evaluation report at a later date, the Date First Seen is the new (later) date, and will not match the Date First Seen in the previous violation.

Timestamp First Seen

Timestamp of the date in which the policy was first triggered for the particular component. This timestamp is represented in standard unix time format.

Reference

For security violations, the CVE or Sonatype code assigned to the vulnerability that caused the policy violation.

Policy Violation Id

The policy violation Id that triggered the violation, useful for automation with related APIs.