Creates CycloneDX Software Bill-of-Materials (SBOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI//CD pipeline with automatic submission to Dependency Track server.

Stars: ✭ 75 (-41.86%)

Mutual labels: bom, sbom, cyclonedx

dep-scan

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

Stars: ✭ 346 (+168.22%)

Mutual labels: vex, sbom, cyclonedx

scancode.io

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

Stars: ✭ 66 (-48.84%)

Mutual labels: license, spdx, cyclonedx

Opencypher

Specification of the Cypher property graph query language

Stars: ✭ 534 (+313.95%)

Mutual labels: specification, standard

KiCost

Build cost spreadsheet for a KiCad project.

Stars: ✭ 376 (+191.47%)

Mutual labels: bom, bill-of-materials

OpossumUI

A light-weight app to audit and inventory large codebases for open source license compliance.

Stars: ✭ 32 (-75.19%)

Mutual labels: spdx, software-bill-of-materials

Sdmx Rest

This repository is used for maintaining the SDMX RESTful web services specification.

Stars: ✭ 50 (-61.24%)

Mutual labels: specification, standard

biolink-model

Schema and generated objects for biolink data model and upper ontology

Stars: ✭ 83 (-35.66%)

Mutual labels: specification, standard

spdx-license-ids

a list of SPDX license identifiers

Stars: ✭ 29 (-77.52%)

Mutual labels: license, spdx

Conventionalcommits.org

The conventional commits specification

Stars: ✭ 3,552 (+2653.49%)

Mutual labels: specification, standard

awesome-sbom

A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

Stars: ✭ 164 (+27.13%)

Mutual labels: software-bill-of-materials, sbom

license-ls

Get a list of licenses used by a projects dependencies

Stars: ✭ 17 (-86.82%)

Mutual labels: license, spdx

Sigmf

The Signal Metadata Format Specification

Stars: ✭ 120 (-6.98%)

Mutual labels: specification, standard

cas

Codenotary Community Attestation Service (CAS) for notarization and authentication of digital artifacts

Stars: ✭ 137 (+6.2%)

Mutual labels: supply-chain, bom

licensor

write licenses to stdout

Stars: ✭ 138 (+6.98%)

Mutual labels: license, spdx

standard-components

A specification for functional UI components

Stars: ✭ 52 (-59.69%)

Mutual labels: specification, standard

SBOM

Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data

Stars: ✭ 38 (-70.54%)

Mutual labels: bill-of-materials, sbom

security-policy-specification-standard

This document proposes a way of standardising the structure, language, and grammar used in security policies.

Stars: ✭ 24 (-81.4%)

Mutual labels: specification, standard

BrAPI

Repository for version control of the BrAPI specifications

Stars: ✭ 50 (-61.24%)

Mutual labels: specification, standard

dependency-check-plugin

Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).

Stars: ✭ 107 (-17.05%)

Mutual labels: owasp, software-security

zap-sonar-plugin

Integrates OWASP Zed Attack Proxy reports into SonarQube

Stars: ✭ 66 (-48.84%)

Mutual labels: owasp, software-security

Software-Component-Verification-Standard

Software Component Verification Standard (SCVS)

Stars: ✭ 82 (-36.43%)

Mutual labels: supply-chain, owasp

shared-row

This is an open data specification for describing the right-of-way (ROW) for street centerline networks. It is intended to establish a common set of attributes (schema) to describe how space is allocated along a streets right of way from sidewalk edge to sidewalk edge.

Stars: ✭ 16 (-87.6%)

Mutual labels: specification, standard

RMEBuilder

[DEPRECATED] Package Manager (like Aptitude, for Debian) (and project builder) for RPGMaker VXAce

Stars: ✭ 15 (-88.37%)

Mutual labels: software

xapi-profiles

A set of documents addressing the structure of and supporting services for xAPI Profiles.

Stars: ✭ 47 (-63.57%)

Mutual labels: specification

awesome-aha

Awesome list for "Aha!" moments related to programming and computer science. Accelerate your learning.

Stars: ✭ 77 (-40.31%)

Mutual labels: software

kube-owasp-zap

Owasp Zap chart for Kubernetes

Stars: ✭ 38 (-70.54%)

Mutual labels: owasp

bom-radar-card

A rain radar card using the new tiled images from the Australian BOM

Stars: ✭ 52 (-59.69%)

Mutual labels: bom

dependency-check-py

🔐 Shim to easily install OWASP dependency-check-cli into Python projects

Stars: ✭ 44 (-65.89%)

Mutual labels: owasp

community-content

Quer contribuir para a comunidade por meio dos canais da BrazilJS e ainda ganhar benefícios legais?

Stars: ✭ 16 (-87.6%)

Mutual labels: software

awesome-bookmarks

书签「利器」收集 🍪🍿 Wiki 在线阅读👉

Stars: ✭ 45 (-65.12%)

Mutual labels: software

dependency-track-maven-plugin

Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable dependencies are found.

Stars: ✭ 28 (-78.29%)

Mutual labels: owasp

setup shift

📨 Automate the download of your current setup

Stars: ✭ 11 (-91.47%)

Mutual labels: software

CPE-Parser

A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST

Stars: ✭ 28 (-78.29%)

Mutual labels: cpe

standard-packages

List of packages that use `standard`