gh-sbom | Utilize GitHub's Dependency Graph to Make SBOMs!
Description
Join us as we demo GH(GitHub) SBOM; this is a gh CLI extension that outputs JSON SBOMs (in SPDX or CycloneDX format) for your GitHub repository using information from the dependency graph.
Chapters
0:00 Intro
0:52 Installation
1:36 Java Project - Generate SPDX SBOM
2:35 Svelte Project - Generate CycloneDX & SPDX SBOM
3:08 Final Thoughts
3:58 Thanks for watching!
Resources
🎯 GitHub: https://github.com/advanced-security/...
🎯 GitHub Dependency Graph: https://docs.github.com/en/code-secur...
🎯 Learn More About SPDX: https://spdx.dev/
🎯 Learn More About CycloneDX: https://cyclonedx.org/
More Great SBOM Resources!
🌐 https://learnsbom.com
Contact Us!
📨 [email protected]
Music by: Bensound.com/free-music-for-videos
License code: IBSTJMW55RHIBW56
#sbom #github #spdx #cyclonedx #cli