Bill o materials
Provenance
BetaHardware an software bills o materials, an the evidence packs producit fae thaim.
Provenance records ilka device the company hauds, wha hauds it an its state, an ilka component ilka release ships, deduplicatit by package URL across the estate. Security findings are jyned tae baith, sae checkin whether an advisory affects us is a lookup. Exports are control-tagged: organised by control reference, wi ilka section statin whit the register daes an disna evidence. Ilka export is recordit in a hash-chained audit log.
Wha it is for. RODMENA keeps its ain asset register an SBOM here, an it is free for personal projects. Ax us aboot commercial use.
- Status
- Beta
- Pairt o
- Offerins
- Licence
- Free fur personal uise
- Product site
- provenance.rodmena.co.uk
- Tags
- SBOMCycloneDXSPDXVEXAsset registerFree fur personal uise
Whit it daes
-
Asset register
Ilka device is leetit wi its custodian, state, encryption status an classification. Offboarding an incident response stairt here.
-
Components, deduplicated
Components are deduplicated by package URL across the estate, so thirty products sharing a base image mak one row an thirty occurrences.
-
Control-tagged exports
Exports are organised by control reference and state their ain limits. The audit log records a digest o the bytes produced.
Documentation an access details is on the product site, provenance.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.
Screens
All 9 screens of Provenance
Register an asset Provenance screenshot
Register a product Provenance screenshot
Licence policy Full page Provenance screenshot
SBOM estate export Provenance screenshot
Evidence export Full page Provenance screenshot
Audit trail Full page Provenance screenshot
Access model Provenance screenshot
Security alerts Provenance screenshot
Pipelines Provenance screenshot