CudaBOM
Install latest/stable of CudaBOM
Ubuntu 16.04 or later?
Make sure snap support is enabled in your Desktop store.
Details for CudaBOM
Package name
- cudabom
License
- Apache-2.0
Last updated
- Today - latest/stable
Websites
Contact
Source code
Report a bug
External link warning
You are about to open
Do you wish to proceed?
Report a Snap Store violation
Report CudaBOM for a Snap Store violation
Snap Store Violation Report submitted successfully
Thank you for your report. Information you provided will help us investigate further.
Error submitting report
There was an error while sending your report. Please try again later.
Share this snap
Generate an embeddable card to be shared on external websites.
Prove which NVIDIA CUDA software is inside an artifact
cudabom proves which NVIDIA CUDA software is actually inside an artifact (Python wheels, shared libraries, executables, and container images) and turns that evidence into security-grade SBOM, advisory, and VEX data.
It specializes in CUDA component identity (cudart, cuBLAS/cuBLASLt, cuDNN, NCCL, and more), including statically linked and vendored/renamed copies, using an explicit evidence model with EXACT / LIKELY / UNKNOWN confidence. It correlates findings against NVIDIA's machine-readable CSAF security bulletins and enriches existing Syft/Trivy/PEP 770 SBOMs rather than replacing them.
cudabom never runs code on a GPU and never executes what it scans, so it runs on any CI runner. Outputs a terminal table, native JSON, CycloneDX 1.6, CycloneDX VEX, SARIF 2.1.0, and Markdown.
cudabom is an independent project and is not an NVIDIA product. Releases are Sigstore-signed with SLSA Build Level 3 provenance.
| Revision | Channel | Version | Build | Commit | Download SBOM |
|---|
The build and commit information is derived from build infrastructure records.
Install CudaBOM on your Linux distribution
Choose your Linux distribution to get detailed installation instructions. If yours is not shown, get more details on the installing snapd documentation.
