CudaBOM

Find the CUDA your SBOM missed.

cudabom is an open-source Rust CLI that proves which NVIDIA CUDA software is actually inside an artifact (Python wheels, shared libraries, executables, and container images) and turns that evidence into security-grade SBOM, advisory, and VEX data.

Start with the Overview, jump to the CLI reference, see what it recognizes under CUDA coverage and Advisory coverage, and read the measured Comparison against blint, Syft, and Trivy.