Skip to main content
Vibgrate Graph: over 40% fewer tokens, same results
Back to Tags

Spdx

5 items tagged with "spdx"

Filter by type:

Standards1

Standard

SPDX 3.0.1

An ISO-standardised bill-of-materials format for communicating software composition, licences, and provenance. 3.0.1 is a maintenance release of the 3.0 model, which reorganised SPDX into profiles covering security, licensing, build, and AI/data.

Tutorials2

Tutorial

How to generate an SBOM in your CI pipeline

Produce a software bill of materials for every build in CI and attach it as an artifact for compliance and security.

Tutorial

Produce an SBOM for Compliance and Audit

Generate an SPDX or CycloneDX SBOM as documented evidence for a compliance audit, with a readable report to accompany it.

Integrations1

Integration

SBOM / VEX Import

Ingest CycloneDX, SPDX, and VEX files from any scanner to enrich the Risk Register with reachability-aware findings.

FAQs1

FAQ

How do I export SBOMs from Vibgrate scans?

Use vg sbom export to emit CycloneDX or SPDX SBOMs from scan artifacts. Example: vg sbom export --format cyclonedx --out sbom.cdx.json. Use vg sbom de...