Software Bill of Materials and Inventory Setup
Create a reliable inventory of components.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Guide me to set up a software bill of materials (SBOM) and component inventory. Project types and languages: [PROJECTS_AND_LANGUAGES]. Build and release pipeline: [PIPELINE]. Customers or regulations asking for it: [REQUIREMENTS]. Give me a checklist in order, with checkboxes, and for each item the reason and who does it: [ ] Decide scope: source dependencies, container images, build tools, operating system packages [ ] Choose a standard format (for example SPDX or CycloneDX) and explain the difference in two lines [ ] Pick a generator tool compatible with my languages and name two options per language [VERIFY current tools] [ ] Generate an SBOM in the build pipeline for every release [ ] Store SBOMs with the release artifacts, versioned [ ] Add component name, version, supplier, license, and hash [ ] Scan the SBOM against vulnerability databases on a schedule [ ] Define who responds when a new vulnerability matches a component [ ] Track license obligations [ ] Share with customers on request, in a controlled way [ ] Review the process every quarter Add a sample (small, made-up) SBOM entry in the chosen format, a one-page policy statement, and the five questions I will get from customers and how to answer them. Treat the output as a draft, not legal or compliance advice. Have a qualified professional who knows [JURISDICTION] verify any legal, regulatory, consent or contractual point before you rely on or publish it.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.