Generate an SBOM from AWS environments and scan for vulnerable packages.
npx skills add https://github.com/transilienceai/shasta --skill sbom-transilienceai
Please help me install this Agent Skill. Skill: sbom Source: https://github.com/transilienceai/shasta/tree/main/.claude/skills/sbom Command: npx skills add https://github.com/transilienceai/shasta --skill sbom-transilienceai
The SBOM skill helps you discover and inventory software dependencies in your AWS environments, enabling vulnerability checks and supply-chain risk assessment.
Use the sbom skill to generate an SBOM and run vulnerability scans against your AWS workloads.
High-intent search queries and answers about installing and using this skill.
To generate an SBOM for your AWS environment, this skill inventories installed packages and third-party dependencies across your accounts and regions. It outputs a structured Software Bill of Materials detailing your cloud software supply chain.
An SBOM is a Software Bill of Materials listing software dependencies and components. You need one for cloud compliance audits, incident response, and supply-chain risk assessment to identify vulnerable or compromised packages in your workloads.
Yes, you can scan AWS software dependencies automatically using this skill to detect known vulnerabilities and supply-chain compromises. It outputs a vulnerability report and KEV-match counts to help assess your exposure.
Yes, you need AWS credentials to inventory installed packages across multiple accounts and regions. The skill uses these credentials alongside Python-based tooling to access your environment and map software dependencies.
SBOM vulnerability scanning evaluates your AWS software dependencies against vulnerability databases to produce KEV-match counts. This identifies Known Exploited Vulnerabilities to prioritize your supply-chain remediation efforts and generate compliance evidence.
The best way to assess supply-chain risk for AWS workloads is generating an SBOM to inventory dependencies, then scanning for vulnerable or compromised packages. This produces a vulnerability report and compliance evidence across your accounts.
kkmookheyValidate AWS credentials and inventory active services across accounts and regions.
limit5Map CVE entries to affected components in a Software Bill of Materials.
RicherTunesImplement CodeQL workflows, Dependabot configurations, and security policy documentation for repositories.
alex-voloshin-devAutomate SBOM generation, SLSA provenance verification, and vulnerability prioritization with EPSS and CISA KEV data.
