🧰 SPDX

The items that name it 21

• What is an AIBOM? AI bill of materials explained for security teams | Endor Labs
  articleas classification.technologies2026-10-29
• SBOMs are Just a Means to an End | Endor Labs
  articleas classification.technologies2026-10-16
• EU Cyber Resilience Act: Preparing for December 11, 2027 | Endor Labs
  articleas classification.technologies2026-10-14
• Executive Order 14028 SBOM Requirements: What to Comply With and How | Endor Labs
  articleas classification.technologies2026-10-12
• Guide to Implementing Software Supply Chain Security | Endor Labs
  articleas classification.technologies2026-10-12
• Generating and Managing C and C++ SBOMs
  articleas tools2026-09-29

  SBOM format standard with dedicated, highly structured support for code snippets; used as Yocto's SBOM output format

• Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
  articleas tools2026-09-24

  SBOM format.

• vet (SafeDep)
  repoas affected products2026-09-07

  SBOM format supported for import/export

• DocsGPT Security Hardening Playbook
  writeupas classification.technologies2026-08-15
• npm-scan
  repoas classification.technologies2026-08-05
• Orca Security: AI-BOM
  articleas tools2026-07-31

  Linux Foundation BOM format; 2.2.1 release published as ISO/IEC 5962:2021; SPDX 3.0 (April 2024) restructured around profiles including an AI profile (AI system and model artifacts) and a Dataset profile (preparation process, characteristics, access methods)

• FOSSA: CISA Releases the 2026 SBOM Minimum Elements
  articleas tools2026-07-31

  Machine-processable SBOM data format; one of two formats retained as acceptable in the 2026 CISA minimum elements (previously SWID tags were also listed, now removed). Also ratified as an Ecma standard (ECMA-424 and adjacent).

• Best SBOM Tools in 2026, Compared | Blog | Endor Labs
  articleas classification.technologies2026-07-29
• wolfBoot 2.9.0
  articleas classification.technologies2026-07-25
• FOSSA: Allan Friedman
  articleas classification.technologies2026-06-27
• SBOMs in 2026: Everyone's generating them, no one's using them
  articleas tools2026-06-10

  Linux Foundation SBOM standard and machine-readable format, used at 29% adoption per ENISA survey; supported by Aikido's SBOM export

• Socket: pnpm 11 Adds Supply Chain Protection Defaults
  articleas classification.technologies2026-05-07
• CRA Compliance Lab
  repoas classification.technologies2026-05-06
• CRA SBOM CLI
  repoas classification.technologies2026-05-06
• https://www.enisa.europa.eu/sites/default/files/2026-10/ENISA%20Technical%20Advisory%20-%20Software%20Bill%20of%20Materials%20-%20v1.10.pdf
  advisoryas classification.technologies
• git-pkgs — dependency history & supply-chain analysis for git repos
  repoas classification.technologies