Skip to content

Add CBOM-Lens and CBOM-Repository to Tool Center - #137

Open
3keyroman wants to merge 1 commit into
CycloneDX:mainfrom
3keyroman:add-cbom-lens-and-cbom-repository
Open

Add CBOM-Lens and CBOM-Repository to Tool Center#137
3keyroman wants to merge 1 commit into
CycloneDX:mainfrom
3keyroman:add-cbom-lens-and-cbom-repository

Conversation

@3keyroman

Copy link
Copy Markdown

Adds two CBOM tools to the Tool Center.

CBOM-Lens — CLI that discovers certificates, keys, secrets, and algorithms on local systems, in container images, and on network services, and generates a CycloneDX 1.6 or 1.7 CBOM. Detects post-quantum algorithms and emits the CycloneDX 1.7 algorithmFamily and ellipticCurve registry fields.

CBOM-Repository — REST API service that stores, versions, retrieves, and searches CycloneDX CBOM documents on S3-compatible object storage.

Both are MIT-licensed and published by OmniTrust. Only files in tools/ are added; tools.json is left to the assembly workflow.

@3keyroman
3keyroman requested a review from a team as a code owner August 4, 2026 08:47
Copilot AI lite review requested due to automatic review settings August 4, 2026 08:47
Signed-off-by: 3keyroman <46850604+3keyroman@users.noreply.github.com>
@3keyroman
3keyroman force-pushed the add-cbom-lens-and-cbom-repository branch from c373f74 to bd101c1 Compare August 4, 2026 08:49

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds two new Tool Center v2 tool descriptors for OmniTrust CBOM tooling, enabling the assembly workflow to pick them up via the tools/ directory.

Changes:

  • Added CBOM-Lens tool metadata (CLI + container image) for generating CycloneDX CBOMs.
  • Added CBOM-Repository tool metadata (service + container image) for storing and searching CBOM documents.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
tools/cbom_lens.json Adds Tool Center v2 metadata for the CBOM-Lens CLI/container tool (CBOM capability; CycloneDX 1.6/1.7).
tools/cbom_repository.json Adds Tool Center v2 metadata for the CBOM-Repository API service/container (CBOM capability; CycloneDX 1.6/1.7).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot AI review requested due to automatic review settings August 4, 2026 08:49

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants