analyzing-sbom-for-supply-chain-vulnerabilities

【数据与研究】Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk scores, identifies transitive vulnerability paths, and generates compliance reports. Activates for requests involving…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准