Locations

Container Image locations model the image a finding was found in, identified by registry, repository and digest, and the assets that run it

Export an Asset's dependency inventory as CycloneDX or SPDX, and its finding statuses as a CycloneDX VEX document

What Locations are and why they replace Endpoints

What happens when you migrate existing Endpoint data to Locations

Code locations model where a static-analysis finding lives in source, and record its movement history as code evolves

Manage software dependencies and SBOMs as Locations

Day-to-day use of URL Locations as the Endpoints replacement