Review a workspace for software-supply-chain evidence relevant to SBOM and EU Cyber Resilience Act readiness. Check for machine-readable SBOMs, CycloneDX, SPDX, lockfiles, VEX/CSAF, vulnerability-disclosure evidence, provenance or attestations, and release records. Receive a deterministic Review Priority with clear guidance on what to review next. The workflow is local and read-only and does not certify compliance.
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “ECZ-ID SBOM & CRA Readiness” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 1
- ECZ-ID SBOM & CRA Readiness
Review SBOM and CRA evidence
Things to ask
- “Review this workspace for SBOM and CRA evidence gaps and tell me what needs attention first.”
- “Check whether this repository contains enough evidence to identify an affected software component within CRA reporting windows.”
- “Review the software-supply-chain evidence in this project and give me the Review Priority and next actions.”
Related
SuperpowersPlan, develop, and debug codeplugin · by Jesse Vincent · 294k stars