Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding Amazon Inspector SBOM Generator #12

Merged
merged 4 commits into from
Feb 21, 2025
Merged

Adding Amazon Inspector SBOM Generator #12

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
517c68c
Adding Amazon Inspector SBOM Generator
awsactran Feb 20, 2025
8930c1e
Adding Amazon Inspector SBOM Generator
awsactran Feb 20, 2025
c9d60c0
Adding Amazon Inspector SBOM Generator
awsactran Feb 20, 2025
53c2e48
Shortening Description text && remove irrelevant category
awsactran Feb 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions tools.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1587,6 +1587,14 @@
categories:
- proprietary
- analysis
- name: Amazon Inspector SBOM Generator
publisher: Amazon Inspector
description: Amazon Inspector SBOM Generator (inspector-sbomgen) produces SBOMs for various artifacts using multiple collectors, providing an inventory of packages and metadata for vulnerability scanning using Amazon Inspector ScanSBOM API (AWS account required).
websiteUrl: https://docs.aws.amazon.com/inspector/latest/user/sbom-generator.html
categories:
- proprietary
- analysis
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this category really true?

tool-center/tool-categories.yaml

Lines 13 to 15 in 3bc400e

analysis:
text: Tools that can analyze CycloneDX SBOMs
label: Analysis

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @jkowalleck . Thanks for the feedback. Yes, Amazon Inspector SBOM Generator does support evaluating CycloneDX SBOM for vulnerability.

- build-integration
- name: Xygeni Software Supply-Chain Security
publisher: Xygeni
description: Xygeni is a software supply chain security solution that provides visibility, security and integrity in DevOps environments, reducing the risk of breaches and detecting potential attacks, ensuring security in your software releases.
Expand Down