KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #ai-agents #developer-tools #codex #claude-code #mcp #rust #deepseek-harness #typescript #ai-agent #cli

fatbom

★ 32 Open GitHub ↗

fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool's strength.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# FatBOM

fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool's strength.

[![asciicast](https://asciinema.org/a/sLRr4qfMbG9iHBejSohGH09nX.svg)](https://asciinema.org/a/sLRr4qfMbG9iHBejSohGH09nX)

# Installation

Download the latest release archive from [Github Releases](!https://github.com/sbs2001/fatbom/releases) for your os and arch.

Example

```bash
curl -L  -o fatbom.tar.gz  https://github.com/sbs2001/fatbom/releases/download/v0.0.1/fatbom_0.0.1_Linux_x86_64.tar.gz
sudo tar xvf fatbom.tar.gz -C /usr/local/bin/ fatbom
```

# Usage

```
fatbom -s /path/to/scan
```

This command will create 2 files
- `merged_sbom.json` : It's  a standard JSON SPDX SBOM, made by combining output of all SBOM tools.
- `semi_merged_sbom.json`. It contains SBOM generated by each tool.

# Example SBOMs

- [SBOM for last release](https://github.com/sbs2001/fatbom/releases/download/v0.0.1/merged_bom.json)
- [Semi Merged SBOM for last release](https://github.com/sbs2001/fatbom/releases/download/v0.0.1/semi_merged_bom.json)

# Tools Used

- [microsoft/sbom-tool](https://github.com/microsoft/sbom-tool)
- [kubernetes-sigs/bom](https://github.com/kubernetes-sigs/bom)
- [opensbom-generator/spdx-sbom-generator](https://github.com/opensbom-generator/spdx-sbom-generator)
- [anchore/syft](https://github.com/anchore/syft)

fatbom

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README