software-bill-of-materials

Here are 87 public repositories matching this topic...

XmirrorSecurity / OpenSCA-cli

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

security static-analysis vulnerabilities spdx software-supply-chain sca swid devsecops software-composition-analysis software-bill-of-materials license-compliance sbom cyclonedx software-supply-chain-security

Updated Oct 11, 2024
Go

CycloneDX / cdxgen

Star

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. GPT: https://chatgpt.com/g/g-673bfeb4037481919be8a2cd1bf868d2-cdxgen

docker containers supply-chain owasp bom oci sca software-bill-of-materials purl package-url sbom cyclonedx saasbom cbom

Updated Nov 29, 2024
JavaScript

awesomeSBOM / awesome-sbom

Star

A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

awesome software-bill-of-materials sbom sbom-generator awesome-repos sbom-examples awesome-sbom

Updated Nov 8, 2024

microsoft / component-detection

Star

Scans your project to determine what components you use

static-analysis dependencies package-management software-composition-analysis software-bill-of-materials sbom

Updated Nov 28, 2024
C#

CycloneDX / specification

Star

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

Updated Nov 30, 2024
XSLT

CycloneDX / cyclonedx-cli

Star

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

owasp bom vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

Updated Nov 24, 2024
C#

CycloneDX / cyclonedx-maven-plugin

Star

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

maven owasp maven-plugin bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

Updated Nov 29, 2024
Java

spdx / spdx-spec

Star

The SPDX specification in Markdown and HTML formats.

specification spdx licenses bill-of-materials linux-foundation software-bill-of-materials software-package-data-exchange sbom spdx-sbom software-transparency

Updated Nov 29, 2024
Python

CycloneDX / cyclonedx-python

Star

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

python environment poetry conda owasp python3 pip bom spdx hacktoberfest requirements bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator sbom-tool

Updated Nov 25, 2024
Python

CycloneDX / cyclonedx-dotnet

Star

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

dotnet owasp bom dotnet-core vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

Updated Nov 17, 2024
C#

CycloneDX / bom-examples

Star

A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)

owasp bom vex bill-of-materials software-bill-of-materials sbom cyclonedx sbom-examples obom mbom saasbom

Updated Nov 13, 2024

CycloneDX / cyclonedx-gradle-plugin

Star

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

gradle owasp gradle-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator

Updated Nov 22, 2024
Java

CycloneDX / cyclonedx-gomod

Star

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

golang owasp bom vex bill-of-materials software-bill-of-materials go-modules sbom sbom-generator obom mbom saasbom

Updated Nov 27, 2024
Go

tiiuae / sbomnix

Star

A suite of utilities to help with software supply chain challenges on nix targets

python security nix static-analysis dependencies cpe software-supply-chain vulnerability-scanners bill-of-materials software-bill-of-materials purl sbom cyclonedx sbom-generator software-supply-chain-security spdx-sbom sbom-tool

Updated Nov 18, 2024
Python

CycloneDX / cyclonedx-node-module

Star

creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects

nodejs node dependency-graph bom metapackage meta-package software-bill-of-materials sbom cyclonedx sbom-generator sbom-tool

Updated Oct 25, 2024

CycloneDX / cyclonedx-rust-cargo

Star

Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

rust owasp cargo bom vex spdx bill-of-materials software-bill-of-materials purl package-url cargo-plugin sbom cyclonedx sbom-generator obom mbom saasbom

Updated Nov 30, 2024
Rust

CycloneDX / sbom-utility

Star

Utility that provides an API platform for validating, querying and managing BOM data

owasp bom vex vdr spdx spdx-license hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom spdx-sbom sbom-tool sbom-quality

Updated Nov 19, 2024
Go

intelops / compage

Star

Compage - Low-Code Framework to develop Rest API, gRPC, dRPC, GraphQL, WebAssembly, microservices, FaaS, Temporal workloads, IoT and edge services, K8s controllers, K8s CRDs, K8s custom APIs, K8s Operators, K8s hooks, etc. with minimal coding and by automatically applying best practice methods like software supply chain security measures, SBOM, …