Awesome Open Source
Search
Programming Languages
Languages
All Categories
Categories
About

The Top 23 Sbom Open Source Projects

Open source projects categorized as Sbom
Categories > Sbom
Syft ⭐ 5,116
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
dependent packages 130total releases 326most recent commit 5 months ago
Retire.js ⭐ 3,448
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
dependent packages 156total releases 123most recent commit 5 months agonpm retire} Downloads
Dependency Track ⭐ 2,119
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
most recent commit 5 months ago
Scancode Toolkit ⭐ 1,887
🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
dependent packages 12total releases 58most recent commit 5 months agopypi scancode-toolkit} Downloads
Hummerrisk ⭐ 1,702
HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。
most recent commit 3 months ago
Ort ⭐ 1,405
A suite of tools to automate software compliance checks.
dependent packages 70total releases 13most recent commit 5 months ago
Lunasec ⭐ 1,355
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunase
total releases 3most recent commit 8 months ago
Sbom Tool ⭐ 1,330
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
dependent packages 4total releases 47most recent commit 5 months agonuget Microsoft.Sbom.Contracts} Downloads
Kubeclarity ⭐ 1,192
KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems
total releases 40most recent commit 5 months ago
Cve Bin Tool ⭐ 997
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
total releases 22most recent commit 5 months ago
Opensca Cli ⭐ 964
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
most recent commit 5 months ago
Dep Scan ⭐ 916
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
total releases 123most recent commit 10 days ago
Tern ⭐ 909
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.
total releases 20most recent commit 7 months ago
Zarf ⭐ 868
DevSecOps for Air Gap & Limited-Connection Systems. https://zarf.dev/
dependent packages 1total releases 123most recent commit 5 months ago
Purl Spec ⭐ 560
A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
most recent commit 6 months ago
Cargo Auditable ⭐ 539
Make production Rust binaries auditable
dependent packages 5total releases 11most recent commit 3 months agocargo auditable-serde} Downloads
Sandworm Audit ⭐ 455
Security & License Compliance For Your App's Dependencies 🪱
dependent packages 4total releases 13most recent commit 8 months agonpm sandworm} Downloads
Meta Package Manager ⭐ 420
🎁 wraps all package managers with a unifying CLI
dependent packages 1total releases 78most recent commit 5 months agopypi meta-package-manager} Downloads
Bomber ⭐ 406
Scans Software Bill of Materials (SBOMs) for security vulnerabilities
total releases 18most recent commit 5 months ago
Awesome Sbom ⭐ 394
A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles
most recent commit 5 months ago
Cdxgen ⭐ 382
Creates CycloneDX Software Bill of Materials (SBOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962
dependent packages 3total releases 219most recent commit 5 months agonpm @appthreat/cdxgen} Downloads
Component Detection ⭐ 348
Scans your project to determine what components you use
dependent packages 4total releases 21most recent commit 5 months agonuget Microsoft.ComponentDetection.Detectors} Downloads
Reuse Tool ⭐ 329
reuse is a tool for compliance with the REUSE recommendations.
dependent packages 23total releases 18most recent commit 5 months agopypi reuse} Downloads
The 10 Most Depended On Sbom Open Source Projects
Cyclonedx Go ⭐ 54
Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)
dependent packages 214total releases 17latest release August 17, 2023most recent commit 7 months ago
Retire.js ⭐ 3,448
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
dependent packages 156total releases 123latest release October 11, 2023most recent commit 5 months agonpm retire} Downloads
Syft ⭐ 5,116
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
dependent packages 130total releases 326latest release November 29, 2023most recent commit 5 months ago
Ort ⭐ 1,405
A suite of tools to automate software compliance checks.
dependent packages 70total releases 13latest release November 23, 2023most recent commit 5 months ago
Reuse Tool ⭐ 329
reuse is a tool for compliance with the REUSE recommendations.
dependent packages 23total releases 18latest release December 01, 2022most recent commit 5 months agopypi reuse} Downloads
Cyclonedx Python Lib ⭐ 50
Python library for CycloneDX
dependent packages 19total releases 84latest release November 02, 2023most recent commit 5 months agopypi cyclonedx-python-lib} Downloads
Cyclonedx Node Module ⭐ 115
creates CycloneDX Software Bill of Materials (SBOM) from node-based projects
dependent packages 19total releases 57latest release December 16, 2022most recent commit 8 months agonpm @cyclonedx/bom} Downloads
Cyclonedx Node Npm ⭐ 58
Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
dependent packages 15total releases 39latest release November 06, 2023most recent commit 5 months agonpm @cyclonedx/cyclonedx-npm} Downloads
Bom ⭐ 278
A utility to generate SPDX-compliant Bill of Materials manifests
dependent packages 12total releases 14latest release March 31, 2023most recent commit 5 months ago
The 10 Latest Releases In Sbom Open Source Projects
Cyclonedx Python ⭐ 181
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
dependent packages 6total releases 75latest release January 12, 2024most recent commit 5 months agopypi cyclonedx-bom} Downloads
Component Detection ⭐ 348
Scans your project to determine what components you use
dependent packages 4total releases 21latest release December 09, 2023most recent commit 5 months agonuget Microsoft.ComponentDetection.Detectors} Downloads
Sbomqs ⭐ 109
SBOM quality score - Quality metrics for your sboms
total releases 28latest release December 07, 2023most recent commit 5 months ago
Sbom Tool ⭐ 1,330
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
dependent packages 4total releases 47latest release December 07, 2023most recent commit 5 months agonuget Microsoft.Sbom.Contracts} Downloads
Cyclonedx Gomod ⭐ 113
Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
dependent packages 4total releases 64latest release December 06, 2023most recent commit 5 months ago
Cyclonedx Javascript Library ⭐ 12
Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.
dependent packages 9total releases 53latest release December 02, 2023most recent commit 5 months agonpm @cyclonedx/cyclonedx-library} Downloads
Cyclonedx Php Library ⭐ 6
PHP Implementation of CycloneDX Bill of Materials (BOM)
total releases 30latest release December 02, 2023most recent commit 5 months ago
Cyclonedx Webpack Plugin ⭐ 22
Create CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
dependent packages 2total releases 27latest release December 01, 2023most recent commit 5 months agonpm @cyclonedx/webpack-plugin} Downloads
Categories
Privacy | About | Terms | Follow Us On Twitter

Downloads, Dependent Repos, Dependent Packages, Total Releases, Latest Releases data powered by Libraries.io.

Copyright 2018-2024 Awesome Open Source.  All rights reserved.