vulkro cra-bundle
Build one zip of EU Cyber Resilience Act (CRA) readiness evidence.
vulkro cra-bundle .
vulkro cra-bundle . --framework iso27001 -o cra-readiness.zip
The zip holds a CycloneDX and an SPDX SBOM, an OpenVEX exploitability document, a compliance evidence pack and a one-page index. It is built on your machine and nothing is uploaded. It is readiness evidence, not a conformity attestation.
Flags
| Flag | Description |
|---|---|
[PATH] | Project root. Default .. |
--framework <NAME> | Framework for the evidence pack. Default soc2. Takes the same values as compliance-pack. |
-o, --output <FILE> | Output zip. Default ./cra-readiness.zip. |
Exit codes
0 bundle written with no findings, 1 bundle written with findings, 2 scan or IO error.
See also: vulkro sbom, Compliance overview.