diff --git a/SBOM-Catalog/package-lock.json b/SBOM-Catalog/package-lock.json index ede2562..a0ce2ec 100644 --- a/SBOM-Catalog/package-lock.json +++ b/SBOM-Catalog/package-lock.json @@ -3296,14 +3296,15 @@ } }, "node_modules/form-data": { - "version": "4.0.2", - "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.2.tgz", - "integrity": "sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==", + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz", + "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==", "license": "MIT", "dependencies": { "asynckit": "^0.4.0", "combined-stream": "^1.0.8", "es-set-tostringtag": "^2.1.0", + "hasown": "^2.0.2", "mime-types": "^2.1.12" }, "engines": { diff --git a/SBOM-Catalog/public/data.yaml b/SBOM-Catalog/public/data.yaml index 04b4aeb..39a6ad8 100644 --- a/SBOM-Catalog/public/data.yaml +++ b/SBOM-Catalog/public/data.yaml @@ -7179,3 +7179,67 @@ - Analyze - Deployment - Container +- Abilities: + - Validate + - Sign + Languages: + - C + - "C++" + - Dotnet + - Erlang + - Elixir + - Fortran + - Go + - Haskell + - Java + - Javascript + - Nim + - "Objective-C" + - Perl + - PHP + - Python + - R + - Ruby + - Rust + - Scala + - Swift + - Typescript + License: Proprietary + Link: https://shiftleftcyber.io/securesbom + Name: SecureSBOM + Publisher: ShiftLeftCyber + Source: Human written + Standards: + - SPDX + - CycloneDX + Summary: 'SecureSBOM is ShiftLeftCybers enterprise-grade cryptographic API for software supply chain security. It + provides scalable signing and verification capabilities for Software Bills of Materials (SBOMs), enabling + organizations to establish trust and integrity in their software supply chains through cryptographic authentication. + + SecureSBOM is available as a cloud-based API service and accessible at https://shiftleftcyber.io/securesbom/. + + Capabilities: + + - Cryptographic signing of SBOMs using industry-standard algorithms (RSA, ECDSA) with secure cloud-based key management + + - Signature verification to validate SBOM authenticity and detect tampering during transit or storage + + - Support for CycloneDX 1.6 standard signature format with SPDX detached signature support (coming soon) + + - RESTful API architecture enabling seamless integration with CI/CD pipelines, DevSecOps workflows, and existing toolchains + + - Enterprise-scale performance with configurable retry logic, timeout handling, and batch processing capabilities + + - Secure key lifecycle management including generation, rotation, and access control through API-based administration + + - Integration support for popular CI systems including GitHub Actions, Jenkins, GitLab CI, and Azure DevOps for automated SBOM signing workflows + + - Audit trail and compliance reporting for regulatory requirements and supply chain governance + Types: + - Design + - Source + - Build + - Analyze + - Deployment + - Runtime + - Container diff --git a/SBOM-Catalog/public/logos/SecureSBOM.png b/SBOM-Catalog/public/logos/SecureSBOM.png new file mode 100644 index 0000000..ec90071 Binary files /dev/null and b/SBOM-Catalog/public/logos/SecureSBOM.png differ