spdx-sbom - Generate SPDX 2.3 JSON Software Bill of Materials
Generates SPDX 2.3 standard JSON Software Bill of Materials from project dependency manifests for compliance and vulnerability analysis.
Tags
Updated: 2026-09-20Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Define component identity and context
- Parse project dependency manifests
- Map package metadata to SPDX fields
- Emit SPDX 2.3 JSON document
- Validate SPDX document structure
Inputs
- Dependency manifests and lockfiles
- Component metadata and supplier information
Outputs
- SPDX 2.3 JSON document