https://github.com/CycloneDX/bom-examples

A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
https://github.com/CycloneDX/bom-examples

bill-of-materials bom cyclonedx mbom obom owasp saasbom sbom sbom-examples software-bill-of-materials vex

Last synced: 28 days ago
JSON representation

A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)

• Host: GitHub
• URL: https://github.com/CycloneDX/bom-examples
• Owner: CycloneDX
• License: cc0-1.0
• Created: 2020-07-31T19:03:34.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2024-06-14T10:02:55.000Z (6 months ago)
• Last Synced: 2024-08-04T02:07:49.252Z (4 months ago)
• Topics: bill-of-materials, bom, cyclonedx, mbom, obom, owasp, saasbom, sbom, sbom-examples, software-bill-of-materials, vex
• Homepage: https://cyclonedx.org
• Size: 2.17 MB
• Stars: 163
• Watchers: 12
• Forks: 57
• Open Issues: 9
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-sbom - CycloneDX BOM Examples

README

        
[![Website](https://img.shields.io/badge/https://-cyclonedx.org-blue.svg)](https://cyclonedx.org/)

[![Slack Invite](https://img.shields.io/badge/Slack-Join-blue?logo=slack&labelColor=393939)](https://cyclonedx.org/slack/invite)

[![Group Discussion](https://img.shields.io/badge/discussion-groups.io-blue.svg)](https://groups.io/g/CycloneDX)

[![Twitter](https://img.shields.io/twitter/url/http/shields.io.svg?style=social&label=Follow)](https://twitter.com/CycloneDX_Spec)

# CycloneDX BOM Examples

CycloneDX was designed from the ground-up to be a Bill of Materials (BOM) format, capable of capturing complex inventory 

information for a wide range of cybersecurity and software supply chain use cases.

This repository contains example CycloneDX Bill of Materials (BOM) created from various open source projects. Examples 

are categorized by different BOM types including:

| BOM Type           | Description                             |

|--------------------|-----------------------------------------|

| [CBOM](CBOM)       | Cryptography Bill of Materials          |

| [HBOM](HBOM)       | Hardware Bill of Materials              |

| [OBOM](OBOM)       | Operations Bill of Materials            |

| [SaaSBOM](SaaSBOM) | Software-as-a-Service Bill of Materials |

| [SBOM](SBOM)       | Software Bill of Materials              |

| [VDR](VDR)         | Vulnerability Disclosure Report         |

| [VEX](VEX)         | Vulnerability Exploitability eXchange   |

When possible, the BOMs conform to the latest version of the CycloneDX specification.

## High-Level Object Model

![CycloneDX Object Model Swimlane](https://cyclonedx.org/theme/assets/images/CycloneDX-Object-Model-Swimlane.svg)