> For the complete documentation index, see [llms.txt](https://docs.opsmx.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.opsmx.com/code-to-cloud-security-and-scanners/artifact-security/deployed-artifacts.md).

# Deployed Artifacts

The Deployed Artifacts page displays the artifact status of all the generated and deployed artifacts in the application.&#x20;

* Navigate to **Security Issues** -> **Deployed Artifacts**.&#x20;
* The panel at the top displays the total number of Artifacts, Deployed Artifacts and Deployed Overridden Artifacts in the application, and the risk status of the artifacts.
  * **Critical Risk** - The artifacts that are of critical risk.&#x20;
  * **High Risk** - The artifacts that are of high risk.&#x20;
  * **Medium Risk** - The artifacts that are of medium risk.&#x20;
  * **Low Risk** - The artifacts that are of low risk.

<figure><img src="/files/Tav7pqInRRdsHIApNxQP" alt=""><figcaption></figcaption></figure>

The panel below displays the details of the artifacts.

* **Artifact** - The name/identifier of the build artifact (e.g., Docker image or package) being tracked.
* **Application** - The application or service to which the artifact belongs.
* **Account** - The cloud or registry account under which the artifact is hosted or deployed.
* **Artifact Version** - The specific version tag or release number of the artifact.
* **Artifact SHA** - The unique cryptographic digest (SHA hash) that identifies the exact artifact build.
* **Semantic Tags** - Human-readable labels or versioning tags associated with the artifact.
* **Open Issues** - The count of currently unresolved security or compliance issues found in the artifact.
* **Vulnerability** - Displays the number of vulnerabilities identified for the given artifact. On clicking it, the [Vulnerabilities Management](https://docs.opsmx.com/opsmx-delivery-shield-platform/user-guide/vulnerability-management) details page is displayed.&#x20;
* **Created On** - The date and time when the artifact was created or registered.
* **Team** - The team or group responsible for owning or managing the artifact.
* **Built by** - The CI/CD pipeline or user that built and published the artifact.
* **Service** - The microservice or workload that the artifact powers in deployment.
* **Source Repository** - The source code repository (e.g., Git URL) from which the artifact was built.
* **Stage** - The deployment stage or environment (e.g., dev, staging, prod) where the artifact is running.
* **Cluster** - The Kubernetes or cloud cluster to which the artifact is deployed.
* **Branch** - The source code branch from which the artifact was built.
* **Reports** - Links or references to associated security scan or compliance reports for the artifact.
* **DBOM Status** -The status of the Dependency Bill of Materials, tracking software supply chain compliance.
* **Actions** - On clicking the three dots, you can view the list of scans run for the artifact as shown below:

<figure><img src="/files/txkjrD03FUyWC1DV0z1Z" alt=""><figcaption></figcaption></figure>

You can download the scan results by clicking on it.&#x20;

### View SBOM for Artifacts

The SBOM for all the deployed artifacts can be viewed by clicking the **View SBOM** option as shown below:&#x20;

<figure><img src="/files/8ILokThjTC2VTSTH0lsq" alt=""><figcaption></figcaption></figure>

On clicking **View SBOM**, the SBOM page is displayed.&#x20;

<figure><img src="/files/oCpn6LYJXdiuzmG48ygm" alt=""><figcaption></figcaption></figure>

It displays the various components and related details of the components as shown below:

* **Component** - Displays the components of the artifact.
* **Version** - Displays the components version.&#x20;
* **Package URL** - Displays the package URL of the component.
* **License** - Displays the list of licenses that are available for the component.&#x20;
* **Vulnerabilities** - Displays the count of vulnerabilities related to the component.&#x20;
* **EOL Risk** - Displays the score of how close the OSS packages used in their project are towards End-of-Life (EOL).
* **Actions -** On clicking **Edit License**, you can edit the license type.

{% hint style="info" %}

* You can view the vulnerabilities of the components by clicking the **Vulnerabilities** column.&#x20;
* You can download the SBOM details in .json or .csv format by clicking the **SBOM File** button.&#x20;
* You can download the SBOM details in report format (.pdf or .html) by clicking the **SBOM** **Report** button.&#x20;
  {% endhint %}

### SBOM, Compare and OSS&#x20;

The SBOM, SBOM comparison page and OSS for the individual artifacts can be accessed from the Reports column.&#x20;

<figure><img src="/files/386uQdKGzcUcwcXsrUtn" alt=""><figcaption></figcaption></figure>

The icons are displayed in the Reports column.&#x20;

* **SBOM** - This **displays** the individual SBOM (Software Bill of Materials) details for the corresponding artifact.

<figure><img src="/files/G1BpBDGmAzwChCKYHiOl" alt=""><figcaption></figcaption></figure>

* **OSS Risk** - This displays the OSS (Open Source Software) Risk page of the corresponding artifact.&#x20;

<figure><img src="/files/oN0arpTjYwvfATloAzs7" alt=""><figcaption></figcaption></figure>

* **Compare** - This **displays** the SBOM (Software Bill of Materials) comparison page for the corresponding artifact.

<figure><img src="/files/OEoFVJiNwv6k3ycnkifa" alt=""><figcaption></figcaption></figure>
