cyclonedx

Here are 21 public repositories matching this topic...

DependencyTrack / dependency-track

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

Updated Nov 4, 2020
Java

anchore / grype

Star

Open

Extend vulnerability matchers

alfredodeza commented Jun 22, 2020

Issue #14 describes the initial matchers needed. This ticket should be picked up once all those are in place, to extend further:

pacman
poetry
pipenv
yarn

good first issue

CycloneDX / specification

Star

Software Bill-of-Material (SBOM) specification designed for use in application security contexts and supply chain component analysis

component bom software license spdx cpe software-security swid swid-tags bill-of-materials software-bill-of-materials sbom cyclonedx

Updated Oct 13, 2020
XSLT

CycloneDX / cyclonedx-maven-plugin

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Maven projects

maven maven-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Oct 12, 2020
Java

CycloneDX / cyclonedx-node-module

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Node.js projects

node bom node-module spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 2, 2020
JavaScript

CycloneDX / cyclonedx-dotnet

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from .NET Projects

dotnet bom dotnet-core spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 4, 2020
C#

CycloneDX / cyclonedx-python

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Python projects

python pip bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 4, 2020
Python

CycloneDX / cyclonedx-gradle-plugin

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Gradle projects

gradle gradle-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Sep 10, 2020
Java

CycloneDX / cyclonedx-core-java

Star

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 4, 2020
Java

CycloneDX / cyclonedx-php-composer

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from PHP Composer projects

php bom composer-plugin spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Oct 13, 2020
PHP

AppThreat / cdxgen

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) for Node.js, Java, Python and golang projects

bom sca cyclonedx

Updated Nov 4, 2020
JavaScript

ozonru / cyclonedx-go

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Go projects. So you can use it with DependencyTrack to monitor security issues in 3rd party modules.

security bom component-analysis security-tools software-composition-analysis bill-of-materials sbom cyclonedx