# Sbom

> SBOM (Software Bill of Materials)

- Skill: `neuralblitz/sbom` (Agent Skill)
- Install (CLI): `npx skillmds@latest add neuralblitz/sbom`
- Raw SKILL.md: https://api.skillmd.com/api/skills/neuralblitz/sbom/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: NeuralBlitz (https://skillmd.com/u/neuralblitz)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/neuralblitz/sbom

---

# SBOM (Software Bill of Materials)

SBOM is a formal, machine-readable inventory of software components and dependencies. It provides transparency into the software supply chain and enables vulnerability management.

## Key Concepts

- Component inventory
- Dependency trees
- Standard formats (SPDX, CycloneDX)
- Vulnerability correlation
- License compliance

## Common Use Cases

- Vulnerability management
- License compliance
- Supply chain security
- Incident response
- Regulatory requirements

## Best Practices

- Generate SBOMs automatically
- Store SBOMs in accessible location
- Integrate into CI/CD
- Update with each release
- Correlate with CVE databases

## Resources

- NTIA: ntia.gov/sbom
- Formats: SPDX, CycloneDX, SWID
- Tools: Syft, Trivy, OWASP Dependency-Track
- Related Skills: dependency-management, vulnerability-assessment, security