Is it possible to store dependency graph in J1?

JSONJ
JSONJ mod
in Security Operations

Similar to this https://npmgraph.js.org/?q=dat ? And query it with the API?

Best Answer

  • JSONJ
    JSONJ mod
    Answer ✓

    Yes, we have an open source util that generates SBOM file, and a util that ingest them into the graph to allow querying and visualization.

    Docker image for generating an SBOM: https://github.com/JupiterOne/node-cdx-bom

    Pull that into J1 to build the graph in the CI/CD pipeline: https://github.com/JupiterOne/j1-cicd-catalog

    We also have this example: https://github.com/JupiterOne/secops-automation-examples/tree/main/npm-inventory

This Month's Leaders

Categories