github.comrepoCRA Compliance Lab
CRA Compliance Lab is a GitHub organization hosting tooling and curated resources for EU Cyber Resilience Act (Regulation 2024/2847) compliance, including cra-sbom-cli — a local CLI that pre-flights CycloneDX or SPDX SBOM files against CRA-aligned content checks and outputs a PDF report — plus an awesome-list covering the regulation, harmonised standards, EUCC, and vulnerability management, and forks of sbomqs and the ENISA Secure by Design/Default playbook. It matters as one of the few practical, hands-on toolsets for organizations operationalizing CRA SBOM and secure-by-design requirements rather than just discussing the law.
TL;DR GitHub org with a CRA-aligned SBOM pre-flight CLI, an awesome-list, and forks of SBOM-quality/secure-by-design tooling for EU Cyber Resilience Act compliance.
Organisations named here
- ENISA
- EU Cyber Resilience Act
Technologies named here
- awesome-cra-compliance
- cra-sbom-cli
- sbomqs
- enisa-sbd-playbook
- CycloneDX
- SPDX
- Python
- Go
Related in GRC
orca.securityarticleOrca Security: NIST AI Risk Management Framework (AI RMF) Explained
fossa.comarticleFOSSA: CISA Releases the 2026 SBOM Minimum Elements
huntress.comwriteupTeach Yourself to Phish | Huntress
