Awesome Open Source

Programming Languages

Search results for sbom spdx

46 search results found

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Scancode Toolkit ⭐ 1,887

🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

A suite of tools to automate software compliance checks.

Opensca Cli ⭐ 964

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

Purl Spec ⭐ 560

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

Reuse Tool ⭐ 329

reuse is a tool for compliance with the REUSE recommendations.

Specification ⭐ 300

CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, ML-BOM, OBOM, MBOM, VDR, and VEX

A utility to generate SPDX-compliant Bill of Materials manifests

Cyclonedx Maven Plugin ⭐ 250

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

Chainloop ⭐ 225

Chainloop is an open source software supply chain control plane, a single source of truth for artifacts plus a declarative attestation crafting process.

Cyclonedx Cli ⭐ 206

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

Cyclonedx Python ⭐ 181

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

Cyclonedx Dotnet ⭐ 147

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

Cyclonedx Gradle Plugin ⭐ 127

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

SBOM quality score - Quality metrics for your sboms

Cyclonedx Rust Cargo ⭐ 61

Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

Cyclonedx Core Java ⭐ 61

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

Sbom Utility ⭐ 52

Utility that provides an API platform for validating, querying and managing BOM data

Covenant ⭐ 52

A tool to generate SBOM (Software Bill of Material) from source code artifacts.

Cyclonedx Python Lib ⭐ 50

Python library for CycloneDX

Nix CycloneDX Software Bills of Materials (SBOMs)

Cyclonedx Php Composer ⭐ 37

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

SBOM Assembler - A tool to compose your various sboms into a single sbom.

The legal review and SBOM system used by SUSE and openSUSE

Spdx Java Library ⭐ 30

Java library which implements the Java object model for SPDX and provides useful helper functions

Cyclonedx Conan ⭐ 23

Creates CycloneDX Software Bill of Materials (SBOM) documents for C/C++ projects using Conan

Cyclonedx Webpack Plugin ⭐ 22

Create CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

Sbom4python ⭐ 21

A tool to generate a SBOM (Software Bill of Materials) for an installed Python module

Sbomdiff ⭐ 16

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

Ort Ci Github Action ⭐ 15

Run ORT in your GitHub action workflow to do licensing, security and best practices checks and generate reports/SBOMs

Sbom Landscape ⭐ 13

SPDX SBOM Landscape

Cyclonedx Javascript Library ⭐ 12

Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

Cargo Spdx ⭐ 11

Generate an SPDX Software Bill of Materials for Rust crates.

Lib4sbom ⭐ 11

Library to ingest and generate SBOMs

Cyclonedx Ruby Gem ⭐ 11

Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

Obom_cli ⭐ 10

Tool to inspect and push and SPDX document as an OCI artifact

Sbom2doc ⭐ 10

Transform SBOM contents into a formatted document including markdown and PDF formats

Spdx To Dependency Graph Action ⭐ 10

A GitHub Action that takes SPDX SBOMs and uploads them to GitHub's dependency submission API to power Dependabot alerts

A group of Rust projects for interacting with and producing software bill of materials (SBOMs).

Meta Wr Sbom ⭐ 8

A CLI tool for generating a Software Bill of Materials (SBOM) from Yocto Project.

Surfactant ⭐ 7

Modular framework for SBOM generation that gathers file information and analyzes dependencies

Ort Ci Gitlab ⭐ 7

Use ORT in your GitLab pipelines

Cyclonedx Php Library ⭐ 6

PHP Implementation of CycloneDX Bill of Materials (BOM)

Cyclonedx Authoring Tool ⭐ 5

An experimental user interface for manually creating, editing, and viewing CycloneDX SBOMs

1-46 of 46 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.