Skip to content

Latest commit

 

History

History
41 lines (28 loc) · 977 Bytes

README.md

File metadata and controls

41 lines (28 loc) · 977 Bytes

ossbomer-conformance

ossbomer-conformance is a Python library and CLI tool that validates SBOM (Software Bill of Materials) files against NTIA, CRA, and other regulatory conformance rules. It supports SPDX and CycloneDX formats in JSON and XML.

Features

  • Validates SBOMs against NTIA and CRA requirements.
  • Supports SPDX and CycloneDX formats (JSON & XML).
  • Detects missing fields and structural inconsistencies (WIP).

Installation

pip install ossbomer-conformance

Usage

CLI Usage to Validate an SBOM file:

ossbomer-conformance --file sbom.json

Specify a custom rules file:

ossbomer-conformance --file sbom.json --rules custom_rules.json

Library Integration:

from ossbomer_conformance.validator import SBOMConformanceValidator

validator = SBOMConformanceValidator("config.json")
result = validator.validate_sbom("sbom.json")
print(result)

License

This project is licensed under the MIT License.