diff --git a/SBOM-Catalog/public/data.yaml b/SBOM-Catalog/public/data.yaml index 382c6e1..9acf55a 100644 --- a/SBOM-Catalog/public/data.yaml +++ b/SBOM-Catalog/public/data.yaml @@ -564,4 +564,17 @@ Type: - Source Language: - - Cargo \ No newline at end of file + - Cargo + +- Name: CycloneDX-Editor-Validator-Tool + Link: https://github.com/Festo-se/cyclonedx-editor-validator + Publisher: Festo + License: OpenSource + Standards: + - CycloneDx + Abilities: + - Edit + - Merge + - Validate + Type: + Language: diff --git a/SBOM-Catalog/public/descriptions/CycloneDX-Editor-Validator-Tool.md b/SBOM-Catalog/public/descriptions/CycloneDX-Editor-Validator-Tool.md new file mode 100644 index 0000000..ad2d585 --- /dev/null +++ b/SBOM-Catalog/public/descriptions/CycloneDX-Editor-Validator-Tool.md @@ -0,0 +1,10 @@ +The [CycloneDX Editor Validator Tool](https://github.com/Festo-se/cyclonedx-editor-validator) is designed as a command-line tool to perform various actions on CycloneDX SBOMs. It allows you to modify, merge and validate your SBOMs. +The documentation is provided as [GitHub pages](https://festo-se.github.io/cyclonedx-editor-validator/). Tne tool can be installed via [pypi](https://pypi.org/project/cyclonedx-editor-validator/). + +## Key Features and Capabilities: +- Amend: Adds missing auto-generatable information to an existing SBOM. +- Merge: Merges two or more SBOMs into one. +- Validate: Validates an SBOM against a given specification. The tool is deployed with the default CycloneDX schema and a custom schema, but a path to schema can also be provided. +- Set: Using the command-line or a json, you can set properties on specified components in an SBOM, e.g. when information in an automtically created SBOM is missing or not correct. +- Build-public: Remove components and information with namespace internal and resolves the dependencies. +- CI-/CD-Integration: As this is a command-line tool, it can be integrated into your pipelines and the validation even provide a report, which can be used by the [`warnings-ng-plugin`](https://github.com/jenkinsci/warnings-ng-plugin) from Jenkins or a [`code-quality-report`](https://docs.gitlab.com/ee/ci/testing/code_quality.html#implement-a-custom-tool) as required by GitLab. diff --git a/SBOM-Catalog/public/logos/CycloneDX-Editor-Validator-Tool.png b/SBOM-Catalog/public/logos/CycloneDX-Editor-Validator-Tool.png new file mode 100644 index 0000000..257e3f5 Binary files /dev/null and b/SBOM-Catalog/public/logos/CycloneDX-Editor-Validator-Tool.png differ