# SBOM interoperability

Interop tests validate that StellaOps SBOMs are consumable by common tools and
that findings parity stays within an acceptable range.

Supported formats
- CycloneDX 1.6+
- SPDX 3.0.1

Parity expectations
- Target parity is 95%+ against reference tools on shared corpora.
- Acceptable differences include VEX application and feed coverage variance.
- Package identity differences are tolerated when functionally equivalent.

Operational notes
- Interop tests run in CI and nightly schedules.
- Offline mode uses bundled corpora and pinned tool versions.

Related references
- docs/interop/README.md
- docs/interop/cosign-integration.md
- docs/benchmarks/*