What tools should I use when conducting a software bill of materials for third party software packages we downloaded for our family home automation system
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What tools should I use when conducting a software bill of materials for third party software packages we downloaded for our family home automation system
1 real search · 1 real-search pass
2026 SBOM tools Syft Grype Trivy OWASP Dependency-Track OSV-Scanner ScanCode official documentationGoogle ↗
OBSERVEDInstruction
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (1)
Classes come from the query-classifier (a local Laya model). 1 of 1 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT1 real searches · gpt-6
2026 SBOM tools Syft Grype Trivy OWASP Dependency-Track OSV-Scanner ScanCode official documentation Google ↗
- Syft · github.com
- Trivy · trivy.dev
- Grype · github.com
- Dependency-Track · dependencytrack.org
- OSV-Scanner · github.com
- ScanCode Toolkit · scancode-toolkit.readthedocs.io
- Software Bill of Materials (SBOM) · owasp.github.io
- DevSecOpsGuideline/current-version/2-Process/2-3-Build/2-3-2-Software-Composition-Analysis/2-3-2-1-Software-Composition-Analysis.md at master · OWASP/DevSecOpsGuideline · github.com
- OWASP Dependency-Track - Software Supply Chain Security · owasp.org
- Welcome · oss.anchore.com
- CISA software supply-chain security resources · cisa.gov
- OWASP Dependency-Track · owasp.org
- CycloneDX SBOM standard · cyclonedx.org
- SPDX SBOM standard · spdx.dev