Ingest Architecture File
Upload SBOM Manifest
Ingest CycloneDX (JSON/XML) or SPDX 2.3 (JSON/YAML/TV) directly from your CI/CD pipeline. Format is auto-detected and normalised to the internal triage model.
Drop SBOM here or click to browse
CycloneDX JSON/XML · SPDX 2.3 JSON/YAML/TV — format auto-detected
Continuous Integration Link
Automate pipeline processing by placing a 50-line YAML engine construct inside your repository actions.
CRA Regulatory Statement
Satisfies Article 13 machine-readable security reporting duties for physical asset and embedded software control loops.
Select a dependency-flagged vulnerability from the asset list to construct a VEX response matrix.
Public Engine Endpoint Summary
This URL serves downstream scanners (Wiz, Trivy, Dependency-Track) automatically, muting verified noise instantly. Select output format to match your toolchain or regulatory requirement.
CycloneDX 1.5 VEX Output
/* Load an SBOM to render output */GitHub Action Pipeline Integration
name: "VEXease SBOM Auto-Push Pipeline"
on:
release:
types: [released]
jobs:
export-vex:
runs-on: ubuntu-latest
steps:
- name: Checkout Source code tree
uses: actions/checkout@v4
- name: Push Machine SBOM Artifact
uses: vexease/vexease-action@v1
with:
api-key: ${{ secrets.VEXOR_API_KEY }}
sbom-path: "./build/reports/bom.json"
product-id: "heavy-machinery-ecu"
version: "${{ github.event.release.tag_name }}"CVE Attack Surface Radar
Live from your triage data — commit attestations and watch the radar update in real time.
VEX Exposure Heatmap
Heat = CVSS × EPSS × KEV weighting. Cells cool as you attest. Click any cell to jump to Triage.