Product demo
CRAcheck in action, in four minutes
From connecting a GitHub repository to a verifiable attestation: the whole path, unedited and in real time.
4 min 10 s — English voice-over.
What the demo covers
Connect a repository
The GitHub App only asks for the repositories you select. CRAcheck reads dependency manifests and repo metadata, never your source code.
Get a compliance score
The score measures the repository against Regulation (EU) 2024/2847 and breaks down every failing criterion, with what to do about it.
Generate the SBOM
A CycloneDX software bill of materials, with known vulnerabilities pulled from OSV.dev and tracked over time.
Pre-fill the documents
EU declaration of conformity and Annex VII technical documentation, pre-filled from repository data and completed by you.
Prepare ENISA reporting
The Article 14 deadlines — 24 hours, 72 hours, 14 days — with the report ready to submit the day an actively exploited vulnerability appears.
Issue an attestation
An attestation a third party can verify from a public URL, to attach to an RFP response or a due diligence review.
Run it on your own repository
The score and the SBOM are free, on one repository, no card required.
Scan my repository