Review a workspace for software-supply-chain evidence relevant to SBOM and EU Cyber Resilience Act readiness. Check for machine-readable SBOMs, CycloneDX, SPDX, lockfiles, VEX/CSAF, vulnerability-disclosure evidence, provenance or attestations, and release records. Receive a deterministic Review Priority with clear guidance on what to review next. The workflow is local and read-only and does not certify compliance.
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “ECZ-ID SBOM & CRA Readiness” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 1
- ECZ-ID SBOM & CRA Readiness
Review SBOM and CRA evidence
Things to ask
- “Review this workspace for SBOM and CRA evidence gaps and tell me what needs attention first.”
- “Check whether this repository contains enough evidence to identify an affected software component within CRA reporting windows.”
- “Review the software-supply-chain evidence in this project and give me the Review Priority and next actions.”
Disconnect or uninstall
- 1In ChatGPT
Disconnect an account in Settings → Apps or Plugins. To remove the plugin itself, open ECZ-ID SBOM & CRA Readiness in the Plugin Directory and select Uninstall plugin. Uninstalling can disconnect every account connected through it, and plugins your workspace installs may not offer the option.
- 2In Codex
Run /plugins in the Codex CLI, select the plugin and uninstall it, or press Space to turn it off.
ECZ-ID SBOM & CRA Readiness alternatives
SuperpowersPlan, develop, and debug codeplugin · by Jesse Vincent · 294k stars
ShopifyBuild and manage your storeplugin · by Shopify · 7.2k stars