This is a list to remind ourselves what tools we'd like to compare ORT's output to in a structured manner and / or on a regular basis, e.g. via jobs in a public ORT Server instance.

Performing the actual comparison probably requires development of utilities that assist in doing so, like tools to normalize / canonize SBOM syntax.

Edits are made as soon as we become aware of tools that are worth comparing to.

CycloneDX (also see the Tool Center):

• https://github.com/CycloneDX/cdxgen (also see Integration / alignment / comparison with other tools like CDXGen #8278)

SPDX:

• https://github.com/microsoft/sbom-tool