Integration > GnuPG
GnuPG
Open-source standard for OpenPGP signing, encryption, and key management used in software supply-chain signing and developer workflows. CBOM Secure inventories keyrings across 1.x (secring.gpg) and 2.x (pubring.kbx, private-keys-v1.d, openpgp-revocs.d) formats.
Use Cases
Inventory GnuPG keyrings across 1.x legacy and 2.x current formats on Windows, Linux, and macOS endpoints.
Multi-Version Coverage
Supports GnuPG 1.x legacy secring.gpg and 2.x pubring.kbx with private-keys-v1.d.
Comprehensive Key Types
Inventories RSA, DSA, ElGamal, ECC (Curve25519, NIST, Brainpool), and PQ-ready algorithms.
Cross-Platform
Discovers keyrings at Windows %APPDATA%\gnupg, Linux/macOS ~/.gnupg, and system-wide paths.
