Bill o materials
Provenance
AvailableHardware an software bills o materials, an the evidence packs producit fae thaim.
Provenance records aa devices the companie hauds, wha hauds thaim an their state. Hit forby records the components in aa releases, deduplicated bi package URL athort the seestem-estate. Security findins is jined tae baith, an gin an advisory affects us comes tae be a lookup. Exports is organised bi control reference, an their sections states what the register dis an disnae evidence. Aa exports is recorded in a hash-chained audit log.
Wha it is for. RODMENA keeps its ain asset register an SBOM heer. Provenance is free fur personal projects, an ye can speir at us anent commercial use.
- Status
- Available
- Pairt o
- Offerins
- Licence
- Free fur personal uise
- Product site
- provenance.rodmena.co.uk
- Tags
- SBOMCycloneDXSPDXVEXAsset registerFree fur personal uise
Whit it daes
-
Asset register
Devices is leetit wi their custodian, state, encryption status an classification, an offboarding an incident response stert frae this leet.
-
Components, deduplicated
Components is deduplicatit bi package URL athort the hale IT seestems. Therty products that share a base image produces ane raw wi therty occurrences.
-
Control-tagged exports
Exports are organised by control reference and state their ain limits. The audit log records a digest o the bytes produced.
Documentation an access details is on the product site, provenance.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.
Screens
Aw 9 screens o Provenance
Register an asset Provenance screenshot
Register a product Provenance screenshot
Licence policy Full page Provenance screenshot
SBOM estate export Provenance screenshot
Evidence export Full page Provenance screenshot
Audit trail Full page Provenance screenshot
Access model Provenance screenshot
Security alerts Provenance screenshot
Pipelines Provenance screenshot