SBOM Observer
The SBOM management tool from Bytesafe, which runs the SBOM Guide
SBOM Observer is a product from Bytesafe, which also runs the SBOM Guide. It collects SBOMs from build pipelines and suppliers, monitors the components against vulnerability and licence data and checks every release against rules that you decide.
Documentation
The documentation is at docs.bytesafe.dev:
- Getting started. How to start using SBOM Observer and upload a first SBOM.
- How-to guides. Step by step for common tasks, such as CI/CD integration.
- Concepts. Background on the data model, attestations and policies.
- References. Supported formats, commands and API.
Free tools
SBOM Analyzer is a web tool where you can upload an SBOM and see the number of components, known vulnerabilities and licences, without an account.
Observer CLI is an open-source command-line tool that creates SBOMs from directories and container images.
Other products from Bytesafe
- Trust Repository collects SBOMs, VEX and support dates from suppliers and publishes your own to customers.
- Dependency Firewall checks packages against your rules before they are installed.