CycloneDX SBOM-in-CI snippet generator (GitHub, GitLab)

SBOM-in-CI snippet generatorCopy a CycloneDX SBOM step for npm, pip, Poetry, Maven, Gradle, Go or Cargo, for GitHub Actions or GitLab CI, with pinned tool versions. An SBOM is one input, not CRA compliance.This site needs JavaScript for the scope checker and the waitlist form.

Home
Does the CRA apply to your product?
The Shieldbook kit
Free sample: the disclosure policy template (K03)
About Shieldbook
Cyber Resilience Act guides
CRA checklist for small teams (by article, dated)
CRA for firmware and IoT makers: classes, CE marking and the declaration of conformity
The EU Cyber Resilience Act (CRA) for mobile apps: what app makers must do and by when
Does the Cyber Resilience Act apply to SaaS?
CRA and open source: what maintainers, stewards and small commercial projects owe
CRA vulnerability reporting: the 24-hour, 72-hour and final report, explained
CRA SBOM requirements: what you must have, which format, what is not required
How to write a vulnerability disclosure policy and a security.txt for the CRA
Free tools
security.txt generator
SBOM-in-CI snippet generator
Privacy notice
Vulnerability disclosure policy
Contact us
Licence
Refund policy
Terms of sale