The Triage Center displays all security findings across your organization, allowing for deep dives into each CVE by package name, package version among all of your repos. Here is a list of things your team can do in the Triage Center:

View Security Findings: All findings are displayed in list format showing:
- Comments
- Status (e.g - Open, Awaiting Analysis )
- CVE (e.g - CVE-2024-21626)
- Severity (e.g - H for High, M for Medium, L for Low)
- CVSS: Common Vulnerability Scoring System generates a numerical score ranging between 0 to 1 based on the severity of the vulnerability
  - The CVSS specifications are owned and managed by FIRST.Org, Inc. (FIRST), a US-based non-profit organization, whose mission is to help computer security incident response teams across the world. The official CVSS documentation can be found at https://www.first.org/cvss/.
- Impacted Package (e.g - curl )
- Impacted Versions (e.g - 7.88.1-10+deb12u )
- Image Repo (e.g - rootioinc/node)
- Installation Path
- Digest (e.g - eaa73aef85 )
Notice the advanced filtering options in the upper right corner to display findings by Severity, Impacted Packages, Image Repo, CVE ID and "Group by Package". Additionally, look for the "Export" functionality in the upper right corner (further details provided below).
Sort Security Findings

In the Triage Center, you can sort CVEs by any parameter displayed in the table, such as CVSS score, severity, status, and more. This functionality helps you prioritize fixes based on severity and impact to meet your SLAs with your customers.

Start using the Root API

Welcome to the Root API!