Date: 2026-04-20 (updated, comprehensive ground truths) Framework: sbom-conformance v2.0.0 Methodology: 10 SBOM generators tested against 22 fixtures covering 10 ecosystems and 15 use-case scenarios. All data from actual tool output — no synthetic scores, no letter grades, only measured counts.
Tools: syft 1.27.0, trivy 0.69.3, trivy 0.55.0 (container), cdxgen 12.1.5, sbom-tool 4.1.5, bom 0.7.1, cyclonedx-gomod 1.9.0,