Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding Amazon Inspector SBOM Generator #12

Merged
merged 4 commits into from
Feb 21, 2025
Merged
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions tools.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1587,6 +1587,15 @@
categories:
- proprietary
- analysis
- name: Amazon Inspector SBOM Generator
publisher: Amazon Inspector
description: Amazon Inspector SBOM Generator (inspector-sbomgen) is a tool that produces SBOMs for archives, container images, directories, local systems, and compiled Go and Rust binaries. The tool scans supported artifacts with multiple collectors to generate an inventory of installed packages and associated metadata. These SBOMs can then be used for vulnerability scanning with the Amazon Inspector Scan SBOM API (active AWS account required).
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

On the website, the description text will be cut off after 250 characters.
Please shorten the text.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you. I have shortened the description text to 250 characters.

websiteUrl: https://docs.aws.amazon.com/inspector/latest/user/sbom-generator.html
categories:
- proprietary
- analysis
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this category really true?

analysis:
text: Tools that can analyze CycloneDX SBOMs
label: Analysis

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @jkowalleck . Thanks for the feedback. Yes, Amazon Inspector SBOM Generator does support evaluating CycloneDX SBOM for vulnerability.

- build-integration
- distribute
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this category really true?

distribute:
text: Tools used to capture and distribute CycloneDX SBOMs
label: Distribute

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @jkowalleck . Thanks for the call-out. I have removed this category.

- name: Xygeni Software Supply-Chain Security
publisher: Xygeni
description: Xygeni is a software supply chain security solution that provides visibility, security and integrity in DevOps environments, reducing the risk of breaches and detecting potential attacks, ensuring security in your software releases.
Expand Down