--- title: How the contextual SBOM pattern improves vulnerability... description: Red Hat's contextual SBOM pattern extends traditional SBOMs by establishing hierarchical relationships between container images and their parent/builder images... canonical: https://daily.dev/posts/how-the-contextual-sbom-pattern-improves-vulnerability-management-i2kykn8ab twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How the contextual SBOM pattern improves vulnerability management | daily.dev og:description: Red Hat's contextual SBOM pattern extends traditional SBOMs by establishing hierarchical relationships between container images and their parent/builder images... og:url: https://daily.dev/posts/how-the-contextual-sbom-pattern-improves-vulnerability-management-i2kykn8ab og:image: https://api.daily.dev/og/posts/I2kyKn8AB.png og:image:alt: How the contextual SBOM pattern improves vulnerability management og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How the contextual SBOM pattern improves vulnerability management **[Red Hat Developer](https://daily.dev/sources/rhdev)** · 15 min read · 0 upvotes · 0 comments ## Summary Red Hat's contextual SBOM pattern extends traditional SBOMs by establishing hierarchical relationships between container images and their parent/builder images using SPDX 2.3 relationships. Instead of flat package lists, it tracks package provenance through DESCENDANT_OF and BUILD_TOOL_OF relationships, enabling teams to quickly identify whether vulnerabilities originate from parent images, builder stages, or direct installations. This approach significantly improves vulnerability remediation by clarifying which component needs updating when a CVE appears, though limitations exist around package matching when unique identifiers are absent. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Rethinking Post-Deployment Vulnerability Detection](https://daily.dev/posts/rethinking-post-deployment-vulnerability-detection-u1tfs0ejg) · OpenSSF · 0 upvotes · 0 comments - [SBOM Generation for Container Workflows](https://daily.dev/posts/sbom-generation-for-container-workflows-nctydjhq9) · Docker · 4 upvotes · 0 comments - [SBOM’s: The essential foundation of open source security](https://daily.dev/posts/sbom-s-the-essential-foundation-of-open-source-security-yyjbmcyjq) · All Things Open · 1 upvotes · 0 comments - [How SBOMs and Engineering Discipline Can Help You Avoid Trivy’s Compromise](https://daily.dev/posts/how-sboms-and-engineering-discipline-can-help-you-avoid-trivy-s-compromise-c6zqbaibq) · InfoQ · 0 upvotes · 0 comments - [SBOM is an investment in the future](https://daily.dev/posts/sbom-is-an-investment-in-the-future-yxeddkkdq) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#containers](https://daily.dev/tags/containers), [#sbom](https://daily.dev/tags/sbom) [View this post on daily.dev](https://daily.dev/posts/how-the-contextual-sbom-pattern-improves-vulnerability-management-i2kykn8ab) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How the contextual SBOM pattern improves vulnerability management","url":"https://daily.dev/posts/how-the-contextual-sbom-pattern-improves-vulnerability-management-i2kykn8ab","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-the-contextual-sbom-pattern-improves-vulnerability-management-i2kykn8ab"},"datePublished":"2026-02-17T13:49:40.025Z","dateModified":"2026-02-17T13:50:20.899Z","description":"Red Hat's contextual SBOM pattern extends traditional SBOMs by establishing hierarchical relationships between container images and their parent/builder images...","image":"https://developers.redhat.com/sites/default/files/styles/share/public/dev_hub_share_image_720.png?itok=LUsxqo-s","thumbnailUrl":"https://developers.redhat.com/sites/default/files/styles/share/public/dev_hub_share_image_720.png?itok=LUsxqo-s","isAccessibleForFree":true,"articleSection":"Red Hat Developer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Red Hat Developer","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/2a8895f3216c4900bdc455585a4ad3e4","url":"https://daily.dev/sources/rhdev"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-the-contextual-sbom-pattern-improves-vulnerability-management-i2kykn8ab","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,containers,sbom","timeRequired":"PT15M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Red Hat Developer","item":"https://daily.dev/sources/rhdev"},{"@type":"ListItem","position":3,"name":"How the contextual SBOM pattern improves vulnerability management"}]} ```