SBOM

SBOM copied to clipboard

Is there a tool to convert the NVD CPE XML file to have a reasonable CPE list on SwiftBOM? The version available on https://sbom.democert.org/sbom/ has a CPE database that seems...

fmgomes

Can SPDX be update to 2.3?

4

Some of the NOASSERTION fields need no longer need to be included. https://spdx.github.io/spdx-spec/v2.3/

kestewart