Additional details on why this justification was chosen.
JustificationType
Provides the type of justification.
Enums
JUSTIFICATION_TYPE_UNSPECIFIED
JUSTIFICATION_TYPE_UNSPECIFIED.
COMPONENT_NOT_PRESENT
The vulnerable component is not present in the product.
VULNERABLE_CODE_NOT_PRESENT
The vulnerable code is not present. Typically this case occurs when source code is configured or built in a way that excludes the vulnerable code.
VULNERABLE_CODE_NOT_IN_EXECUTE_PATH
The vulnerable code can not be executed. Typically this case occurs when the product includes the vulnerable code but does not call or use the vulnerable code.
VULNERABLE_CODE_CANNOT_BE_CONTROLLED_BY_ADVERSARY
The vulnerable code cannot be controlled by an attacker to exploit the vulnerability.
INLINE_MITIGATIONS_ALREADY_EXIST
The product includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-13 UTC."],[[["\u003cp\u003eThis document describes the \u003ccode\u003eJustification\u003c/code\u003e data structure used when an assessment's state is \u003ccode\u003eNOT_AFFECTED\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eJustification\u003c/code\u003e structure includes a \u003ccode\u003ejustificationType\u003c/code\u003e field, specifying the reason for the assessment, and a \u003ccode\u003edetails\u003c/code\u003e field for further explanation.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003ejustificationType\u003c/code\u003e field is an enum with values like \u003ccode\u003eCOMPONENT_NOT_PRESENT\u003c/code\u003e, \u003ccode\u003eVULNERABLE_CODE_NOT_PRESENT\u003c/code\u003e, and \u003ccode\u003eINLINE_MITIGATIONS_ALREADY_EXIST\u003c/code\u003e, each detailing a different reason.\u003c/p\u003e\n"],["\u003cp\u003eThere are six possible values for \u003ccode\u003ejustificationType\u003c/code\u003e that can be used.\u003c/p\u003e\n"]]],[],null,["# Justification\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n- [JustificationType](#JustificationType)\n\nJustification provides the justification when the state of the assessment if NOT_AFFECTED.\n\nJustificationType\n-----------------\n\nProvides the type of justification."]]
