SBOM-tester | Analyze CycloneDX SBOMs!
Description
In this demo, we will be reviewing sbom-tester, an open source tool that analyzes CycloneDX JSON SBOMs against quality factors like presence and correctness of PURLs and more!
Chapters
0:00 Intro
00:51 Installation
1:16 Create Virtual Environment
1:51 Make report on SBOM File
2:10 Generate Report
3:42 Verbose Flag
4:00 Grade SBOM Function
4:27 Final Thoughts
5:13 Thanks For Watching!
Resources
🎯 GitHub: https://github.com/leanix-public/sbom...
🎯 SPDX License List: https://github.com/spdx/license-list-...
🎯 Purl Spec: https://github.com/package-url/purl-spec
🎯 Learn More About CycloneDX: https://cyclonedx.org/
More Great SBOM Resources!
🌐 https://learnsbom.com
Contact Us!
📨 [email protected]
Music by Bensound.com/royalty-free-music
License code: TAMVXJMUKKBGFIKX
#sbom #cyclonedx #purl