CRA SBOM Audit
Pricing
Pay per event
Go to Apify Store
CRA SBOM Audit
Lockfile or SBOM in, CRA evidence pack out: OSV flaws, fixes, licence risk and Annex I mapping.
CRA SBOM Audit
Pricing
Pay per event
Lockfile or SBOM in, CRA evidence pack out: OSV flaws, fixes, licence risk and Annex I mapping.
cra_requirements: List the Cyber Resilience Act requirements this evidence pack maps to (Annex I Part I and II, Article 14) with their application dates, which of them an inventory can evidence and which are process duties it cannot show, plus the accepted input formats and licence classes. audit_inventory: Audit a dependency lockfile or SBOM: every unique component is checked against the OSV vulnerability database (batch query, paged to the end), flaws are deduplicated by alias, scored from the published CVSS v3 vector, matched to the smallest fixed version, and triaged (affected, or proposed not affected for dev-only).
Full text of package-lock.json, yarn.lock (v1), pnpm-lock.yaml, uv.lock, poetry.lock, requirements.txt (pinned), or a CycloneDX or SPDX JSON SBOM. Used by: audit_inventory.
Optional original file name, used to tell formats apart. Used by: audit_inventory.
Optional product name for the report header. Used by: audit_inventory.
