Using Third-Party Generators

Bring Your Own Generator

If your organization is already generating SBOMs using a open-source generator (such as Syft, Trivy, etc.), you can use those same generators through Manifest CLI's and easily automate uploading SBOMs to the Manifest platform using thepublish command.

You can always reach out to the Manifest team to ask for support on how to optimize your SBOM generation.

Integration with SCA tools

If your organization is leveraging an SCA tool for SBOM generation (Snyk, BlackDuck, Fossa, Mend, etc.), use the Manifest CLI's publish command to automate uploading those SBOMs to the Manifest platform.

For more information, read our guide on Using the CLI.