Lowp tae content
Leid: SCO
Menu

Bill o materials

Provenance

Beta

Hardware and software bills o materials, and the evidence packs produced frae thaim.

Open Provenance Contact us

Provenance records ilka device the company hauds, wha hauds it and its state, and ilka component ilka release ships, deduplicated by package URL across the estate. Security findings are joined tae baith, sae checking whether an advisory affects us is a lookup. Exports are control-tagged: organised by control reference, wi ilka section stating whit the register daes and disna evidence. Ilka export is recorded in a hash-chained audit log.

Wha it is for. RODMENA keeps its ain asset register and SBOM here, and it is free for personal projects. Speir us aboot commercial use.

Status
Beta
Pairt o
Offerins
Licence
Free for personal uiss
Product site
provenance.rodmena.co.uk
Tags
SBOMCycloneDXSPDXVEXAsset registerFree for personal uiss

Whit it dis

  • Asset register

    Ilka device is leetit wi its custodian, state, encryption status and classification. Offboarding and incident response stairt here.

  • Components, deduplicated

    Components are deduplicated by package URL across the estate, so thirty products sharing a base image mak one row and thirty occurrences.

  • Control-tagged exports

    Exports are organised by control reference and state thair ain limits. The audit log records a digest o the bytes produced.

Documentation and access details are on the product site, provenance.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.

Screens

All 9 screens of Provenance