Looking for expert recommendations on generating an accurate software bill of materials for legacy monolithic applications with undocumented dependencies.
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
Looking for expert recommendations on generating an accurate software bill of materials for legacy monolithic applications with undocumented dependencies.
2 real searches · 1 real-search pass
best practices generating accurate SBOM legacy applications undocumented dependencies binary analysis runtime discovery tools Syft ScanCode ORT SPDX CycloneDX 2025Google ↗
OBSERVEDComparison
OWASP CycloneDX SBOM guidance completeness dependency relationships evidence legacy softwareGoogle ↗
OBSERVEDInstruction
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (2)
Classes come from the query-classifier (a local Laya model). 2 of 2 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT2 real searches · gpt-6
best practices generating accurate SBOM legacy applications undocumented dependencies binary analysis runtime discovery tools Syft ScanCode ORT SPDX CycloneDX 2025 Google ↗
OWASP CycloneDX SBOM guidance completeness dependency relationships evidence legacy software Google ↗
- Syft · github.com
- ScanCode Toolkit · github.com
- OWASP Dependency-Check · owasp.org
- cdxgen · github.com
- ORT · github.com
- Dependency-Track · dependencytrack.org
- Trivy · trivy.dev
- Authoritative Guide to SBOM · cyclonedx.org
- CycloneDX Response to NTIA SBOM Guidance · ntia.gov
- Dependency Graph SBOM · cheatsheetseries.owasp.org
- Software Security in Supply Chains: Software Bill of Materials (SBOM) · nist.gov
- Software Suppliers Playbook: · ntia.doc.gov
- CISA SBOM guidance · cisa.gov
- Choosing an SBOM Generation Tool · openssf.org
Queries
2 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
best practices generating accurate SBOM legacy applications undocumented dependencies binary analysis runtime discovery tools Syft ScanCode ORT SPDX CycloneDX 2025 OBSERVED | Google ↗ AI Mode ↗ | — | Comparison | — | — | 1x of 1 | |
OWASP CycloneDX SBOM guidance completeness dependency relationships evidence legacy software OBSERVED | Google ↗ AI Mode ↗ | — | Instruction | — | — | 1x of 1 |