ossf/sbom-everywhere

Issues

• Tools to add to the Catalog (The Christmas tree issue)

  #72 opened 4 months ago by Mariuxdeangelo
  0

• [catalog] No description of `Language` field

  #63 opened 5 months ago by funnelfiasco
  3

• Create a getting involved guide

  #70 opened 4 months ago by joshbressers
  0

• Create a policy for adding entries to the guide

  #69 opened 4 months ago by joshbressers
  0

• Create a getting started guide

  #68 opened 4 months ago by joshbressers
  1

• Please add an Analyze "Bubble"

  #59 opened 6 months ago by rjb4standards
  0

• [catalog] No description of License field

  #64 opened 4 months ago by funnelfiasco
  2

• Create some issue templates for new issues

  #58 opened 6 months ago by joshbressers
  0

• Add a note linking to the SBOM Catalog source code

  #50 opened 6 months ago by joshbressers
  0

• being specific on directory structure

  #33 opened a year ago by idunbarh
  3

• Using SBOM Everywhere to amplify guidance through other public workstreams

  #46 opened 9 months ago by joshbressers
  4

• SBOM Naming

  #34 opened 9 months ago by anthonyharrison
  7

• SBOM naming: optional mandatory?

  #40 opened 9 months ago by david-a-wheeler
  3

• SBOM Naming - SBOMs required for all ecosystems?

  #44 opened 10 months ago by idunbarh
  2

• Naming document next steps

  #38 opened a year ago by joshbressers
  1

• specification for sbom filename

  #32 opened a year ago by ctcpip
  5

• SBOM standards for ESM Modules in the JS Ecosystem

  #24 opened 2 years ago by Grunet
  11

• What are our barriers to adoption?

  #13 opened 2 years ago by joshbressers
  15

• Better document goals and purpose

  #12 opened 2 years ago by joshbressers
  12

• Document SBOM use cases

  #3 opened 2 years ago by joshbressers
  4

• Convert NTIA tool list into a more GitHub friendly format

  #2 opened 2 years ago by joshbressers
  18

• SBOM tools test suite

  #22 opened 2 years ago by tsteenbe
  1

• Create SBOM one page overview

  #4 opened 2 years ago by joshbressers
  5

• Consider dependency graphing tooling that can produce standardized output for downstream tools

  #21 opened 2 years ago by mrutkows
  2

• Tooling output standards

  #20 opened 2 years ago by anoncam
  0

• Address SaaS tooling in the absence of real consensus

  #18 opened 2 years ago by anoncam
  2

• Capture OWASP software component verification standard in the readme

  #14 opened 2 years ago by joshbressers
  3

• Create CODEOWNERS for repo

  #9 opened 2 years ago by anoncam
  0

• Funding the SPDX python library

  #6 opened 2 years ago by joshbressers
  2

• Document the current work in flight

  #1 opened 2 years ago by joshbressers
  2

• Figure out github repo permissions

  #7 opened 2 years ago by joshbressers
  1

• Protect the main branch

  #8 opened 2 years ago by joshbressers
  3