Skip to content

SBOM generation

Named by 5 kept items in this workspace.

Search every workspace for SBOM generation. It matches the name as written, so it can find other things that share it.

The items that name it 5

  • ForgeGuardian
    repo2026-09-05

    CycloneDX 1.5 and SPDX 2.3 formats for dependency inventory

  • PackageGuard
    repo2026-08-31

    Generates a standards-compliant Software Bill of Materials in CycloneDX or SPDX JSON format via --sbom, with purls, declared-vs-concluded license evidence, and a direct/transitive dependency graph

  • Securing Docker images
    article2026-08-28

    Generating a software bill of materials for every image, a full inventory of packages and versions, to answer exposure questions when new vulnerabilities drop.

  • FOSSA: EU CRA Compliance Timeline
    article2026-08-07It is written here as SBOM (software bill of materials) generation.

    machine-readable SBOM required as part of Annex I essential requirements by 11 December 2027

  • git-pkgs — dependency history & supply-chain analysis for git repos
    repo

    'git pkgs sbom' exports dependencies as CycloneDX or SPDX formatted Software Bill of Materials including PURLs, versions, and licenses

All techniques in this workspace.