What format does SOOS use to generate the SBOM file?

You can choose to generate an SBOM using Software Package Data Exchange (SPDX) or CycloneDX format. 

SPDX

Available to download as the following file types:

• TXT
• JSON
• HTML

CycloneDX    

Available to download as the following file types:

• JSON
• XML

Vulnerability-Exploitability eXchange (VEX) requirements are built into all CycloneDX SBOM formats.

• For information about producing stand-alone VEX documents, refer to our Generating VEX Reports article.