Top 15 sbom open source projects

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

✭ 27

go owasp bom vex bill-of-materials software-bill-of-materials go-modules sbom sbom-generator obom mbom saasbom

Software Bill of Material (SBOM) standard designed for use in application security contexts and supply chain component analysis

cyclonedx-maven-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

✭ 103

java shell maven owasp maven-plugin bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

cyclonedx-python

Creates CycloneDX Software Bill of Materials (SBOM) from Python projects and environments.

✭ 78

python Dockerfile owasp pip bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

cyclonedx-php-composer

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

✭ 20

PHP composer owasp bom composer-plugin vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

cdxgen

Creates CycloneDX Software Bill-of-Materials (SBOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI//CD pipeline with automatic submission to Dependency Track server.

✭ 75

docker containers bom oci sca sbom cyclonedx

awesome-sbom

A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

✭ 164

awesome software-bill-of-materials sbom sbom-generator awesome-repos sbom-examples awesome-sbom

meta-package-manager

🎁 a wrapper around all package managers

✭ 277

python windows macos linux homebrew ruby-gem npm package-manager steam yarn snap apt pacman pip portage flatpak dnf php-composer mac-app-store sbom xbar

sbom-operator

Catalogue all images of a Kubernetes cluster to multiple targets with Syft

✭ 114

go shell Makefile Dockerfile kubernetes operator k8s sbom supply-chain-security

SBOM

Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data

✭ 38

javascript HTML CSS bill-of-materials sbom sbom-generator

cyclonedx-node-module

creates CycloneDX Software Bill of Materials (SBOM) from node-based projects

✭ 104

nodejs node bom metapackage meta-package software-bill-of-materials sbom cyclonedx

cyclonedx-dotnet

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

✭ 110

C#dotnet owasp bom dotnet-core vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

cyclonedx-cli

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

✭ 154

C#owasp bom vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator obom mbom saasbom

dep-scan

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

✭ 346

python Dockerfile shell docker security-audit containers dependency-analysis vex compliance cve sca vulnerability-scanners security-tools devsecops sbom cyclonedx risk-audit dependency-audit

1-15 of 15 sbom projects