startup-sbom
No liveness check has reached it yet; it is registered on GitHub and PyPI and has been in the index since 12 Oct 2026. How this is checked
Startup-SBOM is an open-source command-line security analysis tool for Linux root filesystems and OCI container images. It maps boot-time processes to packages, correlates vulnerabilities with concrete threats, builds attack chains, and traces supply-chain blast radius for security teams.
Inferred · not functionally tested
Overview
6 featuresPurpose: Identifying exploitable startup paths, package vulnerabilities, attack chains, and supply-chain exposure in Linux systems and container images.
Inferred · not functionally tested
Audience: security engineers and DevSecOps teams
Inferred · not functionally tested
Functions: data_extraction
Inferred · not functionally tested
Interfaces: API: indicated (inferred, not tested) · MCP: unknown · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)
Recorded constraints: pricing: open_source · license: MIT · platforms: CLI · deployment: cli, self_hosted
Constraint provenance is unknown; confirm requirements with the publisher.
Record sources: pypi.org · github.com. These links do not verify the individual claims.
In the Application security & vulnerability scanning space, startup-sbom takes a focused approach. Inferred · not functionally tested: It focuses on identifying exploitable startup paths, package vulnerabilities, attack chains, and supply-chain exposure in Linux systems and container images. Inferred · not functionally tested: startup-sbom is an open-source project aimed at security engineers and DevSecOps teams. Basis unknown · not verified: The project is open source (MIT). Basis unknown · not verified: It runs on the command line, and it can be self-hosted.
It is developed by morpheuslord, and it first shipped in 2024. Development happens publicly on GitHub with 19 stars and 50 commits in the last 90 days. Inferred · not functionally tested: Among its 6 catalogued features are SBOM generation, cycloneDX export, and SPDX export. Inferred · not functionally tested: Catalogued interfaces include a public API.
Summary written by a language model from the project’s public pages.
Tasks: Inferred · not functionally tested
- SBOM generation
- CycloneDX export
- SPDX export
- SARIF export
- VEX support
- Systemd analysis
Topics: Inferred · not functionally tested
Built with & integrations
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
- Indexed12 Oct · 08:14 UTCstartup-sbom seen via PyPI Bulk EnumeratorSource: PyPI Bulk Enumerator · Open
Frequently asked questions about startup-sbom
- What does startup-sbom do?
- Inferred · not functionally tested: Startup-sbom focuses on identifying exploitable startup paths, package vulnerabilities, attack chains, and supply-chain exposure in Linux systems and container images. It is catalogued under Application security & vulnerability scanning on PulseGate.
- Who is startup-sbom for?
- Inferred · not functionally tested: startup-sbom is an open-source project built for security engineers and DevSecOps teams.
- Is startup-sbom free?
- Basis unknown · not verified: Yes — startup-sbom is open source under the MIT license and free to use.
- What platforms does startup-sbom run on?
- Basis unknown · not verified: startup-sbom runs on the command line. It can also be self-hosted.
- Is startup-sbom still maintained?
- The GitHub repository shows 50 commits in the last 90 days.
- What are alternatives to startup-sbom?
- Similar projects tracked by PulseGate include pin-deep, VAKT, and prepublish-guard.pin-deepVAKTprepublish-guard
- Who makes startup-sbom?
- startup-sbom is developed by morpheuslord.
- How long has startup-sbom been around?
- startup-sbom first shipped in 2024.
Also in Application security & vulnerability scanning
Same category — not a similarity match