capabilities.work

Generate supply-chain compliance artifacts with Binarly

A 5-step recipe with Binarly. We can help you get access.

Recipe · 5 steps

Generate supply-chain compliance artifacts with Binarly

with Binarly

Export SBOM, VEX, CBOM, and findings for an image.

  1. Export the CycloneDX SBOM for the image.
  2. Export the SPDX SBOM for the image.
  3. Export the OpenVEX VEX document (exploitability status).
  4. Export the CycloneDX CBOM (cryptographic bill of materials).
  5. Export the machine-readable findings report.
What you'll need to have ready
  • productId
  • imageId
For your developer

Arazzo workflow binarly:generateComplianceArtifacts, 5 operations: GetSbomReportCycloneDX → GetSbomReportSPDX → GetVexReportOpenVEX → GetCbomReport → ImageFindingsReportJson. Specs on APIs.io.

More recipes with Binarly

Scan firmware in CI/CD with Binarly