diff --git a/SBOM-Catalog/public/data.yaml b/SBOM-Catalog/public/data.yaml index 04b4aeb..1bd9254 100644 --- a/SBOM-Catalog/public/data.yaml +++ b/SBOM-Catalog/public/data.yaml @@ -4738,6 +4738,30 @@ compliance rules.' Types: - Analyze +- Abilities: + - Generate + Languages: + - Nix + License: Apache-2.0 + Link: https://github.com/tiiuae/sbomnix + Name: sbomnix + Publisher: Technology Innovation Institute + Source: Human written + Standards: + - SPDX + - CycloneDX + Summary: 'sbomnix is an open-source command-line tool for generating Software Bills + of Materials (SBOMs) for Nix-based software. It accepts Nix derivations, store + paths, result symlinks, and flake references as targets, and emits both SPDX + and CycloneDX JSON output. + + + By default, sbomnix generates SBOMs for runtime dependencies discovered from + realized build outputs. With `--buildtime`, it can instead generate SBOMs for + the buildtime dependency closure without requiring the target to be built.' + Types: + - Build + - Analyze - Abilities: - Consume - Validate