Which vendors support SPDX?

Supported by 13 of 259 vendors

The software bill of materials format for packages, files, licenses and their relationships.

Vendor	Status	Source	Evidence
Anchore Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
AWS Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Black Duck Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Chainguard Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Docker Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
GitHub Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
JFrog Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Mend Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Microsoft Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Snyk Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Sonatype Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Upwind Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026
Wiz Produces SBOMs Vendor docs	Produces SBOMs	Vendor docs	Sep 25, 2026

About SPDX

The software bill of materials format for packages, files, licenses and their relationships.

Listed: on the SPDX tools page. Produces SBOMs: the vendor docs say its product exports or generates SPDX SBOMs. Evidence: the vendor's own documentation naming it, with the sentence kept, or the specification project's own list.

Issued by Linux Foundation (ISO/IEC 5962:2021). Also searched as SPDX SBOM export, SBOM formats, software bill of materials.

Also in Provenance and supply chain: C2PA Content Credentials, CycloneDX

Standards changes by email