Werk #13324: Shipping software bill of materials with Checkmk

Component

Site management

Title

Shipping software bill of materials with Checkmk

Date

Dec 17, 2021

Level

Trivial Change

Class

Security Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.1.0b1	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)
2.0.0p18	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

A software bill of materials can be used to analyze the components that are part of Checkmk. An accurate inventory of all components enables organizations to identify risk, allows for greater transparency, and enables rapid impact analysis.

Checkmk packages are now shipping a BOM in OWASP CycloneDX format. As of Checkmk 2.1.0 and 2.0.0p18 it can be found in each site at the path share/doc/bill-of-materials.json.

To the list of all Werks