The Linux Foundation Projects
Skip to main content

Tool Supplier Information

If you have an SPDX compatible tool and would like it listed, please fill out this online form implemented as a GitHub issue submission. If a listed tool’s description requires an update or correction, use this GitHub form.

We will aim to review and list or request additional information within a month.

In the form we ask you to describe your process for validate compatibility. If you produce SPDX, we encourage you to use the online validation tool.

For tool categorization, we use the NTIA SBOM Tool Classification Taxonomy.

To keep up with the latest and contribute to the future of SPDX, we encourage you to engage with the SPDX Implementers working group. This is an excellent opportunity to discuss the new specification, ask questions, share insights, and collaborate with other developers.

If you have any questions about the process, feel free to contact us at spdx-outreach@lists.spdx.org.