moai-artifacts-builder

SBOM generation automates the creation of software component inventories in CycloneDX or SPDX formats. This Skill generates SBOMs across container images, language packages, binaries, and source archives, enabling visibility into dependencies and compliance with supply chain security standards.

Artifact signing and provenance tracking verify integrity and document the origin of software artifacts throughout their lifecycle. This Skill automates signature verification, provenance metadata attachment, and end-to-end governance across creation, validation, storage, and deployment workflows.

RBAC and audit trails implement governance by restricting who accesses artifacts and recording all actions for compliance. This Skill applies immutable RBAC controls and comprehensive audit logging to enforce SOC 2 and ISO 27001 standards across artifact lifecycles.

Automated vulnerability scanning and compliance checks detect security risks and policy violations without manual review. This Skill scans seven enterprise artifact formats—containers, packages, binaries, documentation, configuration, test reports, and source archives—against compliance standards.

SBOM format support ensures compatibility with enterprise tooling and standards bodies. This Skill generates and validates SBOMs in both CycloneDX and SPDX formats, enabling integration with downstream security and compliance platforms.

Centralized governance replaces fragmented, tool-specific validation with unified policies and visibility. This Skill manages artifact validation, storage, and retirement in a single system, reducing configuration drift and ensuring consistent security across all artifact types.