#

sbom

Here are 24 public repositories matching this topic...

DependencyTrack / dependency-track

Star

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

Updated Nov 4, 2020
Java

syft

anchore / syft

Star

Open

Add distroless image identification

2

wagoodman commented Jun 3, 2020

Should be able to identify a distroless image and determine the version (populating a distro.Distro object from distro.Identify())

Note: anchore-engine has logic for this, which this ticket should keep in parity

Read more

good first issue

CycloneDX / specification

Star

Software Bill-of-Material (SBOM) specification designed for use in application security contexts and supply chain component analysis

component bom software license spdx cpe software-security swid swid-tags bill-of-materials software-bill-of-materials sbom cyclonedx

Updated Oct 13, 2020
XSLT

CycloneDX / cyclonedx-maven-plugin

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Maven projects

maven maven-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Oct 12, 2020
Java

CycloneDX / cyclonedx-node-module

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Node.js projects

node bom node-module spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 2, 2020
JavaScript

CycloneDX / cyclonedx-dotnet

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from .NET Projects

dotnet bom dotnet-core spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 4, 2020
C#

CycloneDX / cyclonedx-python

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Python projects

python pip bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 4, 2020
Python

CycloneDX / cyclonedx-gradle-plugin

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Gradle projects

gradle gradle-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Sep 10, 2020
Java

cdfoundation / sig-security-sbom

Star

SIG Security - Software Bill of Materials

continuous-integration continuous-delivery cdf cicd sbom

Updated Jan 16, 2020
R

CycloneDX / cyclonedx-core-java

Star

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 4, 2020
Java

jenkinsci / dependency-track-plugin

Star

Master repository for the official Dependency-Track Jenkins plugin

security owasp jenkins-plugin bom appsec component-analysis sbom

Updated Nov 3, 2020
Java

CycloneDX / cyclonedx-php-composer

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from PHP Composer projects

php bom composer-plugin spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Oct 13, 2020
PHP

ozonru / cyclonedx-go

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Go projects. So you can use it with DependencyTrack to monitor security issues in 3rd party modules.

security bom component-analysis security-tools software-composition-analysis bill-of-materials sbom cyclonedx

Updated Feb 26, 2020
Go

ptdropper / CVE-Scanner-for-your-SW-BOM

Star

CVE Vulnerability scanner of your software bill of materials (SBOM). ASCII text input.

python nist scan bom nvd3 vulnerability vulnerabilities cve vulnerability-detection cve-scanning vulnerability-identification vulnerability-scanners vulnerability-scanning vulnerability-scanner cve-search cve-databases sbom cve-entries

Updated Oct 26, 2020
Python

spdx / Spdx-Java-Library

Star

Open

Add examples

8

goneall commented Mar 25, 2020

It would help first time users to create some examples for common library usage.

Some ideas for different examples:

Creating a document, adding a few files using the SPDX Model Factory
Parsing license expressions using the [SPDX license parser](https://github.com/spdx/Spdx-J

Read more

good first issue help wanted

CycloneDX / cyclonedx-nuget

Star

Creates CycloneDX Software Bill-of-Materials (SBoM) from NuGet projects

nuget bom spdx bill-of-materials software-bill-of-materials purl package-url sbom

Updated Mar 27, 2019
Java

CycloneDX / cyclonedx-rust-cargo

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Rust (Cargo) projects

rust cargo bom spdx bill-of-materials software-bill-of-materials purl package-url cargo-plugin sbom cyclonedx

Updated Aug 28, 2020
Rust

CycloneDX / cyclonedx-authoring-tool

Star

An experimental user interface for manually creating, editing, and viewing CycloneDX SBOMs

node vue bom spdx authoring-tool bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Apr 15, 2020
Vue

philips-labs / tern-action

Star

GitHub Action to perform a docker scan with VMWARE tern

software-bill-of-materials sbom

Updated Oct 1, 2020
TypeScript

CycloneDX / cyclonedx-ruby-gem

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Ruby projects

ruby bundler gem bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Nov 4, 2020
Ruby

CycloneDX / cyclonedx-webpack-plugin

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from webpack bundles

webpack webpack-plugin bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Jun 4, 2020

CycloneDX / cyclonedx-cocoapods

Star

Creates CycloneDX Software Bill-of-Materials (SBOM) from Objective-C and Swift Projects Using CocoaPods

swift objective-c cocoapods bom spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx

Updated Mar 13, 2020

jhrhee / awesome-sbom

Star

Awesome list for Software Bill of Materials (SBOM)

Updated Nov 1, 2019

sephiroth-j / node-dependency-track-upload

Star

node-dependency-track-upload

node owasp bom node-module sbom cyclonedx dependency-track

Updated Aug 30, 2020
JavaScript

Improve this page

Add a description, image, and links to the sbom topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the sbom topic, visit your repo's landing page and select "manage topics."

You can’t perform that action at this time.