SBOM Generator

СреднийsecurityМинимальный контекст: 16K

Generates and validates Software Bills of Materials in CycloneDX or SPDX formats. Covers dependency inventory, transitive resolution, license and vulnerability annotation, VEX statements, container image SBOMs, and CI integration for supply-chain compliance. Helps teams meet regulatory requirements and track what is actually shipped.

sbomsupply-chaincyclonedxspdxcompliancesecurity

Варианты использования

  • Generating a CycloneDX or SPDX SBOM for a project
  • Producing SBOMs for container images
  • Annotating components with licenses and CVEs
  • Adding VEX statements for known vulnerabilities
  • Integrating SBOM generation into CI

Пример промпта

Set up SBOM generation for our application and CI pipeline. Provide:
1. A recommended tool and format (CycloneDX/SPDX) for [stack]
2. Commands to generate SBOMs for source and container image
3. License and vulnerability annotation approach
4. A VEX workflow for triaging findings
5. A CI step that publishes the SBOM as an artifact

Рекомендуемые модели

claude-opus-4-6gpt-5gemini-2-5-prodeepseek-v4

Совместимые инструменты

claude-codekiroany

Модальности

Вход: text, code
→
Выход: text, code

Похожие Skills

dependency-auditorsecrets-scannersecurity-audit

Автор

OpenModels Community

@openmodelsrun