SBOM Generator

Name: OpenModels
Creator: OpenModels
License: https://github.com/openmodelsrun/openmodels

MittelsecurityMindestens 16K Kontext

Generates and validates Software Bills of Materials in CycloneDX or SPDX formats. Covers dependency inventory, transitive resolution, license and vulnerability annotation, VEX statements, container image SBOMs, and CI integration for supply-chain compliance. Helps teams meet regulatory requirements and track what is actually shipped.

sbom supply-chain cyclonedx spdx compliance security

Anwendungsfälle

Generating a CycloneDX or SPDX SBOM for a project
Producing SBOMs for container images
Annotating components with licenses and CVEs
Adding VEX statements for known vulnerabilities
Integrating SBOM generation into CI

Beispiel-Prompt

Set up SBOM generation for our application and CI pipeline. Provide:
1. A recommended tool and format (CycloneDX/SPDX) for [stack]
2. Commands to generate SBOMs for source and container image
3. License and vulnerability annotation approach
4. A VEX workflow for triaging findings
5. A CI step that publishes the SBOM as an artifact

Empfohlene Modelle

claude-opus-4-6 gpt-5 gemini-2-5-pro deepseek-v4

Kompatible Werkzeuge

claude-codekiroany

Modalitäten

Eingabe: text, code

→

Ausgabe: text, code