Cyclonedx

7 items tagged with "cyclonedx"

Filter by type:

Standards1

CycloneDX 1.7 (SBOM)

A bill-of-materials standard for software, hardware, services, and machine learning models. 1.7 is published as the second edition of Ecma-424 and broadens attestation and cryptographic inventory support.

Best Practices1

Best Practice

CycloneDX SBOM Specification

Lightweight Bill-of-Materials standard for software components, vulnerabilities, and licenses.

Tutorials3

Tutorial

How to generate an SBOM in your CI pipeline

Produce a software bill of materials for every build in CI and attach it as an artifact for compliance and security.

Tutorial

Export a CycloneDX SBOM with Vibgrate CLI

Generate a standards-compliant CycloneDX SBOM from your project in one command and write it to a file ready for sharing or archival.

Tutorial

Attach an SBOM to a GitHub Release

Generate a CycloneDX SBOM during your release workflow and publish it as a downloadable asset on the GitHub Release.

Integrations1

Integration

SBOM / VEX Import

Ingest CycloneDX, SPDX, and VEX files from any scanner to enrich the Risk Register with reachability-aware findings.

FAQs1

FAQ

How do I export SBOMs from Vibgrate scans?

Use vg sbom export to emit CycloneDX or SPDX SBOMs from scan artifacts. Example: vg sbom export --format cyclonedx --out sbom.cdx.json. Use vg sbom de...