-
-
Notifications
You must be signed in to change notification settings - Fork 9
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adding Amazon Inspector SBOM Generator #12
Changes from 3 commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||||
---|---|---|---|---|---|---|---|---|
|
@@ -1587,6 +1587,15 @@ | |||||||
categories: | ||||||||
- proprietary | ||||||||
- analysis | ||||||||
- name: Amazon Inspector SBOM Generator | ||||||||
publisher: Amazon Inspector | ||||||||
description: Amazon Inspector SBOM Generator (inspector-sbomgen) is a tool that produces SBOMs for archives, container images, directories, local systems, and compiled Go and Rust binaries. The tool scans supported artifacts with multiple collectors to generate an inventory of installed packages and associated metadata. These SBOMs can then be used for vulnerability scanning with the Amazon Inspector Scan SBOM API (active AWS account required). | ||||||||
websiteUrl: https://docs.aws.amazon.com/inspector/latest/user/sbom-generator.html | ||||||||
categories: | ||||||||
- proprietary | ||||||||
- analysis | ||||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. is this category really true? tool-center/tool-categories.yaml Lines 13 to 15 in 3bc400e
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Hi @jkowalleck . Thanks for the feedback. Yes, Amazon Inspector SBOM Generator does support evaluating CycloneDX SBOM for vulnerability. |
||||||||
- build-integration | ||||||||
- distribute | ||||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. is this category really true? tool-center/tool-categories.yaml Lines 34 to 36 in 3bc400e
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Hi @jkowalleck . Thanks for the call-out. I have removed this category. |
||||||||
- name: Xygeni Software Supply-Chain Security | ||||||||
publisher: Xygeni | ||||||||
description: Xygeni is a software supply chain security solution that provides visibility, security and integrity in DevOps environments, reducing the risk of breaches and detecting potential attacks, ensuring security in your software releases. | ||||||||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
On the website, the description text will be cut off after 250 characters.
Please shorten the text.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you. I have shortened the description text to 250 characters.