Workflows

Generating, distributing, and monitoring SBOMs and VEX documents

Step-by-step workflows for producing and consuming transparency artifacts.

When to generate SBOMs, how the generation pipeline works, and where to store the results.

Responding to security advisories and communicating impact to customers.

Supplier Transparency

Using SBOM supplier data to assess third-party risk, enforce procurement policies, and maintain ongoing supplier assurance

Generate SBOMs

When to generate SBOMs, how the generation pipeline works, and where to store the results