SPDX – Linux Foundation Projects Site

An open standard capable of representing systems with software components in as SBOMs (Software Bill of Materials) and other AI, data and security references supporting a range of risk management use cases.
The SPDX specification is a freely available international open standard (ISO/IEC 5962:2021).
Learn more about the structure of SPDX and how to participate.
Explore the ways that you can engage with SPDX.
SPDX workgroup tools and others you can use.
SPDX is organized in areas of interest or profiles focused on specific user needs.
See the Tools page for more info Pitloom automates the generation of SPDX 3-compliant Software Bills of Materials (SBOMs) for Python applications and AI models.…
Check out the Tools page for new additions: SBOMlyze- Apache-2.0 CLI and GitHub Action for reviewing SPDX, CycloneDX,and Syft SBOM changes. sbomqs- Comprehensive SBOM quality…
Copyright © 2023 The Linux Foundation® . All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page. Linux is a registered trademark of Linus Torvalds. Privacy Policy and Terms of Use.