layout | keywords | comments | banner | title | window_title | description | micro_nav |
---|---|---|---|---|---|---|---|
home |
application security, software security, software bill of materials, SBOM, BOM, HBOM, VEX, VDR, open source, supply chain, specification, spdx, license, package url, purl, cpe, swid |
false |
true |
OWASP CycloneDX |
OWASP CycloneDX Software Bill of Materials (SBOM) Standard |
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. The specification supports Software Bill of Materials (SBOM), Software-as-a-Service Bill of Materials (SaaSBOM), Hardware Bill of Materials (HBOM), Operations Bill of Materials (OBOM), Vulnerability Disclosure Reports (VDR), and Vulnerability Exploitability eXchange (VEX). |
false |