Standardsby GlyphWhich vendors support SPDX?
Supported by 14 of 272 vendors · 5 from SPDX tools
The software bill of materials format for packages, files, licenses and their relationships.
Anchore produces SPDX SBOMs, per the SPDX tools page and its own documentation.
AWSAWS produces SPDX SBOMs, per its own documentation.
Black Duck produces SPDX SBOMs, per the SPDX tools page and its own documentation.
Chainguard produces SPDX SBOMs, per its own documentation.
Docker produces SPDX SBOMs, per its own documentation.
GitHub produces SPDX SBOMs, per its own documentation.
JFrog produces SPDX SBOMs, per its own documentation.
Mend produces SPDX SBOMs, per its own documentation.
Microsoft produces SPDX SBOMs, per the SPDX tools page and its own documentation.
Snyk produces SPDX SBOMs, per the SPDX tools page and its own documentation.
Sonatype produces SPDX SBOMs, per its own documentation.
Upwind produces SPDX SBOMs, per its own documentation.
Wiz produces SPDX SBOMs, per its own documentation.
Atlassian is listed among the SPDX tools, per the SPDX tools page.
Changes
About SPDX
The software bill of materials format for packages, files, licenses and their relationships.
Listed: on the SPDX tools page. Produces SBOMs: the vendor docs say its product exports or generates SPDX SBOMs. Evidence: the vendor's own documentation naming it, with the sentence kept, or the specification project's own list.
Issued by Linux Foundation (ISO/IEC 5962:2021). Also searched as SPDX SBOM export, SBOM formats, software bill of materials.
Also in Provenance and supply chain: C2PA Content Credentials, CycloneDX