AI KnowledgeIntermediateUpcoming
SECURE CHAIN: Automated SBOM Generator with Dependency Intelligence
The Challenge
Participants will design an automated SBOM (Software Bill of Materials) generation tool that scans a given software project (Python or other languages) to detect all direct dependencies. Using this data, the tool must also identify transitive dependencies by leveraging relationships available in the Secure Chain Knowledge Graph. The final output should be a complete, standards-compliant SBOM file along with a simple visualization of the dependency graph.
About This Challenge
This challenge focuses on improving software supply-chain transparency by building an automated SBOM generation tool. Participants must create a system that analyzes a software project—such as a Python repository—to detect and extract all direct dependencies. They must then enrich this information by identifying transitive dependencies through the Secure Chain Knowledge Graph, which models dependency relationships across ecosystems. The tool should consolidate this hierarchy into a valid SBOM file in a recognized industry format (e.g., SPDX, CycloneDX). In addition, participants are encouraged to provide a visual representation of the dependency structure, drawing inspiration from prior hackathon solutions for KG visualization. This challenge tests participants’ ability to combine static analysis, knowledge graph querying, and standards-compliant export formats to produce a comprehensive view of a project’s dependency chain.
