- Home
- SBOM Management Software
- sbomasm
On the recordRead 8 Oct 202614 facts
sbomasm
On the record
- Assembly
- It can merge multiple SBOMs, including hierarchical, flat, and augment merge workflows.github.com · read 8 Oct 2026
- CI/CD
- The README describes GitLab and GitHub CI as ecosystems where sbomasm is used for automated SBOM assembly.github.com · read 8 Oct 2026
- Formats
- It supports both SPDX and CycloneDX formats.github.com · read 8 Oct 2026
- Installation
- The README lists Go install, Homebrew, Docker, prebuilt binaries, and building from source as installation options.github.com · read 8 Oct 2026
- Integration
- The README documents integration with Dependency-Track to pull SBOMs, assemble them, and push them back.github.com · read 8 Oct 2026
- License
- The repository is published under the Apache-2.0 license.github.com · read 8 Oct 2026
- License enrichment
- The enrich command can fill missing license information using ClearlyDefined data.github.com · read 8 Oct 2026
- Metadata
- The edit command can add or update SBOM metadata such as supplier information and licenses.github.com · read 8 Oct 2026
- Purpose
- sbomasm is a toolkit for managing SBOMs across their lifecycle, including assembly, metadata editing, sensitive-data removal, enrichment, signing, and verification.github.com · read 8 Oct 2026
- Release platforms
- The latest release shown provides macOS Darwin arm64 and x86_64 archives, plus Linux arm64 and x86_64 archives.github.com · read 8 Oct 2026
- Sensitive data
- The rm command can remove components or fields, including internal components before sharing.github.com · read 8 Oct 2026
- Signing
- sbomasm can cryptographically sign and verify SBOMs using ShiftLeftCyber’s third-party service.github.com · read 8 Oct 2026
- Speed
- The README describes sbomasm as optimized for large-scale operations.github.com · read 8 Oct 2026
- Support
- The README lists Slack, live chat, email and GitHub bug reports as ways to contact the project team.github.com · read 8 Oct 2026
