Lowp tae content

Bill o materials

Provenance

Available

Hardware and software bills o materials, and the evidence packs produced frae thaim.

Provenance records aw devices the company hauds, wha hauds thaim an their state. It forbye records the components in aw releases, deduplicated by package URL athort the seestem-steid. Security findins are jyned tae baith, an gin an advisory affects us becomes a lookup. Exports are organised by control reference, an their sections state whit the register daes an daes nae evidence. Aw exports are recorded in a hash-chained audit log.

Wha it is for. RODMENA keeps its ain asset register an SBOM here. Provenance is free for personal projects, an ye can spier at us anent commercial uiss.

Status
Available
Pairt o
Offerins
Licence
Free for personal uiss
Tags
SBOMCycloneDXSPDXVEXAsset registerFree for personal uiss

Whit it dis

  • Asset register

    Devices is leetit wi their custodian, state, encryption status and clessification, and affboarding and incident response stairt frae this leet.

  • Components, deduplicated

    Components is deduplicatit by package URL athort the haill seestem. Thirty products that share a base image mak ae raw wi thirty occurrences.

  • Control-tagged exports

    Exports are organised by control reference and state thair ain limits. The audit log records a digest o the bytes produced.

Documentation and access details are on the product site, provenance.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.