Bill o materials
Provenance
AvailableHardware and software bills o materials, and the evidence packs produced frae thaim.
Provenance records aw devices the company hauds, wha hauds thaim an their state. It forbye records the components in aw releases, deduplicated by package URL athort the seestem-steid. Security findins are jyned tae baith, an gin an advisory affects us becomes a lookup. Exports are organised by control reference, an their sections state whit the register daes an daes nae evidence. Aw exports are recorded in a hash-chained audit log.
Wha it is for. RODMENA keeps its ain asset register an SBOM here. Provenance is free for personal projects, an ye can spier at us anent commercial uiss.
- Status
- Available
- Pairt o
- Offerins
- Licence
- Free for personal uiss
- Product site
- provenance.rodmena.co.uk
- Tags
- SBOMCycloneDXSPDXVEXAsset registerFree for personal uiss
Whit it dis
-
Asset register
Devices is leetit wi their custodian, state, encryption status and clessification, and affboarding and incident response stairt frae this leet.
-
Components, deduplicated
Components is deduplicatit by package URL athort the haill seestem. Thirty products that share a base image mak ae raw wi thirty occurrences.
-
Control-tagged exports
Exports are organised by control reference and state thair ain limits. The audit log records a digest o the bytes produced.
Documentation and access details are on the product site, provenance.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.
Screens
Aw 9 screens o Provenance
Register an asset Provenance screenshot
Register a product Provenance screenshot
Licence policy Full page Provenance screenshot
SBOM estate export Provenance screenshot
Evidence export Full page Provenance screenshot
Audit trail Full page Provenance screenshot
Access model Provenance screenshot
Security alerts Provenance screenshot
Pipelines Provenance screenshot