Generate CycloneDX SBOMs with Syft, resolve licenses, and export CSV reports.
npx skills add https://github.com/NVIDIA/OpenShell --skill sbom-nvidia
Please help me install this Agent Skill. Skill: sbom Source: https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/sbom Command: npx skills add https://github.com/NVIDIA/OpenShell --skill sbom-nvidia
SBOM generation and license resolution automate visibility into software supply chains, enabling compliant reporting and risk assessment.
Run the full SBOM workflow to generate a CycloneDX SBOM, resolve licenses, and export a CSV for review.
High-intent search queries and answers about installing and using this skill.
To generate a CycloneDX SBOM and export it to CSV, run the full SBOM workflow which uses Syft to create the SBOM and export tooling to produce a CSV file for stakeholder review.
License resolution for missing or hash-based licenses is handled by querying public registries such as crates.io, npm, and PyPI to fetch accurate licensing details for dependencies.
Yes, Syft is required to generate CycloneDX SBOMs for OpenShell projects, serving as the core tool for SBOM generation within the build and release workflows.
Yes, you can produce release-artifact SBOMs on demand without committing them to the repository, using the CSV export tooling located in the deploy/sbom workflow.
SBOM generation and license resolution automate visibility into software supply chains, enabling compliant reporting and risk assessment for build and release workflows.
grivera82Enumerate public GitHub orgs, dependencies, SBOMs, and CI/CD configurations for supply-chain risks.
chenchunrunGenerate SBOMs and detect vulnerabilities across multi-language codebases.
x402agentGenerate CycloneDX SBOMs for OpenShell projects and export CSV reports with resolved licenses.
limit5Map CVE entries to affected components in a Software Bill of Materials.
