Check out the Tools page for new additions: SBOMlyze- Apache-2.0 CLI and GitHub Action for reviewing SPDX, CycloneDX,and Syft SBOM changes. sbomqs- Comprehensive SBOM quality & compliance tool lynkctl- CLI SBOM generator tool that produces high-quality SPDX:3.0.1 (and CycloneDX) SBOMs from C/C++ and embedded firmware projects without executing the build. DevKit Dossier- Hosted record keeper for manufacturers selling software, firmware, mobile apps or SDKs in the EU.