Generate and manage SBOMs in CycloneDX and SPDX formats with NTIA checks.
npx skills add https://github.com/endorlabs/skills-ideas --skill endor-sbom-endorlabs
Please help me install this Agent Skill. Skill: endor-sbom Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-sbom Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-sbom-endorlabs
SBOM management automates the creation, analysis, and alignment of software component inventories, reducing manual effort and increasing visibility into dependencies and licenses.
Export an SBOM for your current project using CycloneDX or SPDX formats to begin inventorying components.
High-intent search queries and answers about installing and using this skill.
To export an SBOM in CycloneDX or SPDX formats, you provide your project UUID to trigger the Endorctl export workflow. This generates a standardized software component inventory to support compliance and audit readiness.
Comparing SBOMs allows you to detect dependency drift and NTIA compliance gaps by analyzing differences between software component inventories. The process validates formats and highlights variations to ensure ongoing standard conformance.
Yes, you can import and analyze external SBOMs to identify software components, dependencies, and risks. This process automates inventory alignment and increases visibility into software supply chain vulnerabilities.
Yes, a project UUID is required to enforce Endorctl SBOM workflows, including validating SBOM formats. This ensures standard-conformance and audit readiness for your software supply chain inventory.
SBOM management matters for risk assessment because it automates the creation and analysis of software component inventories. This reduces manual effort and increases visibility into dependencies and licenses across your software supply chain.
EhraxCreates isolated git worktrees for feature work with verified ignore rules and project setup.
alex-voloshin-devAutomate SBOM generation, SLSA provenance verification, and vulnerability prioritization with EPSS and CISA KEV data.
luissimon96Audit dependencies, generate SBOMs, and check license compliance for software projects.
farmountainGenerate CycloneDX and SPDX SBOMs and analyze dependencies for vulnerabilities.
