Image Overview: spdx-tools

• Overview
• Details
• Tags History
• Provenance

Check SPDX SBOM for validity

Download this Image

The image is available on cgr.dev:

docker pull cgr.dev/chainguard/spdx-tools:latest

This image contains the SPDX tool available from here: https://github.com/spdx/tools-java

Using this tool you can verify the SPDX SBOM for validity:

docker run -v $(pwd):/tmp cgr.dev/chainguard/spdx-tools:latest Verify /tmp/sbom.json

You can also compare docs, “pretty-print” an SPDX SBOM, and more.