A multi-language reference implementation for computing canonical SBOM hashes. Supports CycloneDX v1.7 & SPDX v2.2, v3.0 (JSON) to demonstrate cross-language interoperability and best practices for SBOM signing and verification.
javascript python java go rust json signature verification hash jsf spdx git-workflows canonicalization normalization jcs sbom cyclonedx rfc-8785
-
Updated
Feb 20, 2026 - Java