From dc51c8aace0e3b7a73791f940b1281d60c6679fd Mon Sep 17 00:00:00 2001 From: Huub Hermsen Date: Thu, 12 Nov 2026 13:57:27 +0100 Subject: [PATCH 1/2] Add Agnes Co-Authored-By: Claude Opus 5.5 Signed-off-by: Huub Hermsen --- tools/agnes.json | 49 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 tools/agnes.json diff --git a/tools/agnes.json b/tools/agnes.json new file mode 100644 index 0000000..d0908fa --- /dev/null +++ b/tools/agnes.json @@ -0,0 +1,49 @@ +{ + "$schema": "https://cyclonedx.org/schema/tool-center-v2.tool.schema.json", + "specVersion": "2.0", + "tool": { + "name": "Agnes", + "publisher": "Agnes", + "description": "Hosted code-health analysis for frontend repositories. Every analysis produces a CycloneDX SBOM of the installed npm and Composer packages, with licences, the dependency graph and known vulnerabilities from OSV. Hosted in the EU.", + "website_url": "https://agnes.dev/sbom", + "capabilities": [ + "SBOM", + "VDR/VEX" + ], + "availability": [ + "FREEMIUM", + "SUBSCRIPTION" + ], + "functions": [ + "AUTHOR", + "ANALYSIS" + ], + "analysis": [ + "SECURITY_VULNERABILITIES", + "LICENSE_REPORTING", + "OUTDATED_COMPONENTS" + ], + "transform": [], + "packaging": [ + "APPLICATION", + "GITHUB_APP" + ], + "library": [], + "platform": [], + "lifecycle": [ + "PRE-BUILD" + ], + "supportedStandards": [ + "CYCLONEDX", + "PACKAGE_URL" + ], + "cycloneDxVersion": [ + "CYCLONEDX_V1.6" + ], + "supportedLanguages": [ + "JAVASCRIPT/TYPESCRIPT", + "NODE.JS", + "PHP" + ] + } +} From 31110c0ec696826c1fe6e11977d4239167c382e7 Mon Sep 17 00:00:00 2001 From: Huub Hermsen Date: Thu, 12 Nov 2026 15:15:29 +0100 Subject: [PATCH 2/2] Agnes: function ANALYSIS only; description says web app via GitHub App Co-Authored-By: Claude Opus 5.5 Signed-off-by: Huub Hermsen --- tools/agnes.json | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/tools/agnes.json b/tools/agnes.json index d0908fa..9ce362d 100644 --- a/tools/agnes.json +++ b/tools/agnes.json @@ -4,7 +4,7 @@ "tool": { "name": "Agnes", "publisher": "Agnes", - "description": "Hosted code-health analysis for frontend repositories. Every analysis produces a CycloneDX SBOM of the installed npm and Composer packages, with licences, the dependency graph and known vulnerabilities from OSV. Hosted in the EU.", + "description": "Web app that analyses the frontend code of GitHub and Bitbucket repositories every day. Each analysis generates a CycloneDX SBOM of the installed npm and Composer packages, with licences, the dependency graph and known vulnerabilities from OSV.", "website_url": "https://agnes.dev/sbom", "capabilities": [ "SBOM", @@ -15,7 +15,6 @@ "SUBSCRIPTION" ], "functions": [ - "AUTHOR", "ANALYSIS" ], "analysis": [