#csaf

SBOM analysis platform for storing, correlating, and querying software bill of materials and security advisories (CSAF/VEX, OSV, CVE) at scale. Exposes a correlation graph of vuln :left_right_arrow: component :left_right_arrow: product :left_right_arrow: VEX

csaf-validator-lib is a library that can be used to check whether a given CSAF 2.0 document is valid.

csaf-validator-service is a REST-based service that can be used to check whether a given CSAF 2.0 document is valid.