You can choose to generate an SBOM using Software Package Data Exchange (SPDX) or CycloneDX format. 

Both SPDX and CycloneDX SBOMs can be exported to the RKVST SBOM hub.

SPDX

Available to download as the following file types:

  • TXT
  • JSON
  • HTML

Available to export to RKVST as TXT or JSON file type only.

CycloneDX    

Available to download as the following file types:

  • JSON
  • XML

Available to export to RKVST as JSON file type only.

Vulnerability-Exploitability eXchange (VEX) requirements are built into all CycloneDX SBOM formats.