In this tutorial, we demonstrate how you can use Endor Labs Open Source to produce software bills of material (SBOMs) & Vulnerability Exploitability Exchange (VEX) documents in one place. In addition to satisfying stakeholder and compliance requirements, SBOMs can give you a complete view of risk across your code and pipelines. VEX documents enhance the value of SBOMs by providing an annotation of vulnerabilities. The benefit of generating these documents from the same tool that does your software composition analysis (SCA) is you can automate SBOM creation across versions and languages without the need for additional plugins or tooling.

In this tutorial, we demonstrate how you can use Endor Labs Open Source to produce software bills of material (SBOMs) & Vulnerability Exploitability Exchange (VEX) documents in one place. In addition to satisfying stakeholder and compliance requirements, SBOMs can give you a complete view of risk across your code and pipelines. VEX documents enhance the value of SBOMs by providing an annotation of vulnerabilities. The benefit of generating these documents from the same tool that does your software composition analysis (SCA) is you can automate SBOM creation across versions and languages without the need for additional plugins or tooling.

In this tutorial, we demonstrate how you can use Endor Labs Open Source to produce software bills of material (SBOMs) & Vulnerability Exploitability Exchange (VEX) documents in one place. In addition to satisfying stakeholder and compliance requirements, SBOMs can give you a complete view of risk across your code and pipelines. VEX documents enhance the value of SBOMs by providing an annotation of vulnerabilities. The benefit of generating these documents from the same tool that does your software composition analysis (SCA) is you can automate SBOM creation across versions and languages without the need for additional plugins or tooling.