In this tutorial, we demonstrate how you can use Endor Labs SBOM Hub to ingest 1st and 3rd party software bills of material, manage them centrally, and detect new vulnerabilities in a timely manner.

• Manually import CycloneDX or SPDX SBOM in JSON or XML format
• Automate import by integrating into CI
• Maintain and manage SBOMs in one place
• Detect new findings released after SBOM creation
• Investigate dependencies in SBOMs

In addition to satisfying stakeholder and compliance requirements, SBOMs can give you a complete view of risk across your code and pipelines. VEX documents enhance the value of SBOMs by providing an annotation of vulnerabilities. The benefit of generating these documents from the same tool that does your software composition analysis (SCA) is you can automate SBOM creation across versions and languages without the need for additional plugins or tooling.

In this tutorial, we demonstrate how you can use Endor Labs SBOM Hub to ingest 1st and 3rd party software bills of material, manage them centrally, and detect new vulnerabilities in a timely manner.

• Manually import CycloneDX or SPDX SBOM in JSON or XML format
• Automate import by integrating into CI
• Maintain and manage SBOMs in one place
• Detect new findings released after SBOM creation
• Investigate dependencies in SBOMs

In addition to satisfying stakeholder and compliance requirements, SBOMs can give you a complete view of risk across your code and pipelines. VEX documents enhance the value of SBOMs by providing an annotation of vulnerabilities. The benefit of generating these documents from the same tool that does your software composition analysis (SCA) is you can automate SBOM creation across versions and languages without the need for additional plugins or tooling.

In this tutorial, we demonstrate how you can use Endor Labs SBOM Hub to ingest 1st and 3rd party software bills of material, manage them centrally, and detect new vulnerabilities in a timely manner.

• Manually import CycloneDX or SPDX SBOM in JSON or XML format
• Automate import by integrating into CI
• Maintain and manage SBOMs in one place
• Detect new findings released after SBOM creation
• Investigate dependencies in SBOMs

In addition to satisfying stakeholder and compliance requirements, SBOMs can give you a complete view of risk across your code and pipelines. VEX documents enhance the value of SBOMs by providing an annotation of vulnerabilities. The benefit of generating these documents from the same tool that does your software composition analysis (SCA) is you can automate SBOM creation across versions and languages without the need for additional plugins or tooling.