latiotech

Setup Sbom — Development skill for Claude Code

Development community

Walkthrough: Set up SBOM generation and provenance attestation pipelines.

How to install Setup Sbom

Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-sbom/SKILL.md

Terminal

mkdir -p ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-sbom && curl -fsSL https://raw.githubusercontent.com/latiotech/secure-supply-chain-skills/HEAD/commands/setup-sbom.md -o ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-sbom/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Setup Sbom does

description: "Walkthrough: Set up SBOM generation and provenance attestation pipelines" allowed-tools: Read, Write, Edit, Glob, Grep, Bash(git:, gh:, syft:, trivy:, cosign:, npm:, pip:*)

Interactive walkthrough to set up Software Bill of Materials (SBOM) generation and SLSA provenance attestations in your CI/CD pipeline. SBOMs provide a complete inventory of what's in your software; provenance attestations prove where and how it was built.

Read `${CLAUDE_PLUGIN_ROOT}/skills/suppl

Alternatives in Development

Experiment — Experiment — Setup + Code Generation + Execution 613 ★
Aod.Blueprint — Unified project setup & story generation — auto-detects new vs existing projects 89 ★
Dsa Mentor — Daily algorithm lecture and LeetCode problem walkthrough 84 ★