124 Open source projects that are alternatives of or similar to cdxgen

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

creates CycloneDX Software Bill of Materials (SBOM) from node-based projects

Creates CycloneDX Software Bill of Materials (SBOM) from Python projects and environments.

Software Bill of Material (SBOM) standard designed for use in application security contexts and supply chain component analysis

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

FullMetalUpdate Python client application.

A browser extension to quickly fill shopping carts with electronic components.

Oracle Cloud Infrastructure Quick Start

A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

Template Files for New OCI Projects

前端课程学习笔记汇总

Jenkins Plugin for Oracle Cloud Infrastructure (Compute)

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Vulnerability database and package search for sources such as OSV, NVD, GitHub and npm.

Vilicus is an open source tool that orchestrates security scans of container images(docker/oci) and centralizes all results into a database for further analysis and metrics.

Terraform Module for creating Oracle Cloud Infrastructure compute instances

Container images created with Bazel

Build container images for your .NET applications.

Static code analysis test source code

Codenotary Community Attestation Service (CAS) for notarization and authentication of digital artifacts

Oracle Sharded database deployment automation and tools for use in client applications.

An archive-less dockerTools.buildImage implementation

用于检测maven项目的第三方依赖组件是否存在安全漏洞。

A rain radar card using the new tiled images from the Australian BOM

Airgap Swiss Army Knife

Detections for CVE-2021-44228 inside of nested binaries

A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.

Comparing the free tier offers of the major cloud providers like AWS, Azure, GCP, Oracle etc.

Build cost spreadsheet for a KiCad project.

Lightweight Linux for Podman

Terraform module to deploy Cloudera on Oracle Cloud Infrastructure (OCI)

Valheim Oracle Cloud Server Setup

Custom Animated Weather Card for any weather provider

🎁 a wrapper around all package managers

A simple Java command-line utility to mirror the entire contents of VulnDB.

KiCad to PartKeepr BOM Tool with Octopart integration

transport-agnostic, fine-grained content-addressable container image layout

ORAS CLI

Complete Documentation For JavaScript Bootcamp Course By Osama Elzero.

Catalogue all images of a Kubernetes cluster to multiple targets with Syft

Lock, Stock, and Two Smoking MicroVMs. Create and manage the lifecycle of MicroVMs backed by containerd.

A reimplementation of lsbom

Stream, Mutate and Sign Images with AWS Lambda and ECR

KiCad automation utility

A reusable and extensible Terraform module that provisions a VCN on Oracle Cloud Infrastructure

OCI Distribution Specification

Extract contents of a container image in a local folder

Doing things right, in the name of Sun / Oracle

Essex - Boilerplate for Docker Based Projects

OCI Runtime, Image and Distribution Spec in Rust

A tool to build OCI compliant images

istio offical suppport for arm64 will land since v1.15

Secure JDK Flight Recorder management for containerized JVMs

Detection of the BOM and removing as necessary

Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data