From e0f84ce51c1b5073ea459d9be72b45cde3e12cd6 Mon Sep 17 00:00:00 2001 From: Josh Bressers Date: Wed, 11 Sep 2024 08:13:36 -0500 Subject: [PATCH 1/2] Add a simple FAQ Signed-off-by: Josh Bressers --- FAQ.md | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 FAQ.md diff --git a/FAQ.md b/FAQ.md new file mode 100644 index 0000000..d924600 --- /dev/null +++ b/FAQ.md @@ -0,0 +1,26 @@ +# SBOM Everywhere Catalog FAQ + +## What is the SBOM Catalog? +The OpenSSF has a working group called “SBOM Everywhere”, one of the projects this group is working on is a place to catalog as much SBOM related information as possible. Because the OpenSSF has a focus on open source, we’re doing it as an open source project! The goal is to capture anything that’s SBOM related and make it easy to find. Projects, documents, standards, working groups, anything that could be useful. + +## How do I access and use the tool? +The SBOM catalog can be seen at https://sbom-catalog.openssf.org/ - It’s actually two tools, the Wiki and the catalog. The Wiki is to capture more static information like documents and standards. Our goal is to link to as many things as we can. + +The Catalog is where we can add tooling with a variety of uses. You have the ability to filter results, view a list or a tree, arrange which filters to apply in which order. It’s a very interactive tool. There are a lot of tools and figuring out which tool does what you need is a challenge, we want to make it easier. It’s a read only website, feel free to push buttons and see what it can do. If something breaks, let us know! + +## Who can update this? +Anyone can contribute to this. It’s open source! You can see all the details in our GitHub repo +https://github.com/ossf/sbom-everywhere + +## What sort of information can we add? +We are trying to capture and track as much information about the SBOM ecosystem we can. Meetings, projects, tools, formats, standards, everything. If you’re unsure, let’s chat about it, you can find our details here https://sbom-catalog.openssf.org/about-us.html + +## How can I add an entry or fix an error to the Catalog or Wiki? +Open an issue in GitHub https://github.com/ossf/sbom-everywhere/issues +We’re working on a nice contributing guide, but the issue is easiest right now. The guide is still a few weeks out probably. + +## Is the catalog only for open-source projects? +We accept all tools, not only open-source tools. Feel free to open an issue if you’re unsure. We’re happy to discuss anything. + +## What’s the license? +Contributions to the SBOM Catalog and Wiki should be considered under the Apache 2.0 open source license From dbdae11b0908cb11b0331c0c5e9028bd4665c72a Mon Sep 17 00:00:00 2001 From: Josh Bressers Date: Wed, 11 Sep 2024 09:24:05 -0500 Subject: [PATCH 2/2] Add a link to SBOM Everywhere Signed-off-by: Josh Bressers --- FAQ.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/FAQ.md b/FAQ.md index d924600..16585f9 100644 --- a/FAQ.md +++ b/FAQ.md @@ -1,7 +1,7 @@ # SBOM Everywhere Catalog FAQ ## What is the SBOM Catalog? -The OpenSSF has a working group called “SBOM Everywhere”, one of the projects this group is working on is a place to catalog as much SBOM related information as possible. Because the OpenSSF has a focus on open source, we’re doing it as an open source project! The goal is to capture anything that’s SBOM related and make it easy to find. Projects, documents, standards, working groups, anything that could be useful. +The OpenSSF has a working group called [SBOM Everywhere](https://github.com/ossf/sbom-everywhere), one of the projects this group is working on is a place to catalog as much SBOM related information as possible. Because the OpenSSF has a focus on open source, we’re doing it as an open source project! The goal is to capture anything that’s SBOM related and make it easy to find. Projects, documents, standards, working groups, anything that could be useful. ## How do I access and use the tool? The SBOM catalog can be seen at https://sbom-catalog.openssf.org/ - It’s actually two tools, the Wiki and the catalog. The Wiki is to capture more static information like documents and standards. Our goal is to link to as many things as we can.