oss-compliance

There are 2 repositories under oss-compliance topic.

nexB / scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
license copyright packages dependencies spdx provenance license-scan copyright-scan licensing spdx-licenses open-source-licensing oss-compliance license-checking software-composition-analysis purl package-url sbom sca cyclonedx dependency-graph
Language:Python 1971
ort
oss-review-toolkit / ort
A suite of tools to automate software compliance checks.
license-scan package-scan package-manager dependencies dependency-graph license copyright spdx copyright-scan compliance license-checking oss-compliance license-management sbom sbom-generator open-source-licensing ospo cyclonedx sca hacktoberfest
Language:Kotlin 1474
tern-tools / tern
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.
compliance containers dependencies docker metadata-extraction open-source oss-compliance python risk-management sbom software-composition-analysis spdx supply-chain-security tool
Language:Python 931
chainloop-dev / chainloop
Chainloop is an Open Source Metadata Vault for your Software Supply Chain metadata, SBOMs, VEX, SARIF files, QA reports, and more.
compliance cyclonedx devsecops sbom sbom-distribution security spdx supply-chain-security metadata-platform sbom-discovery license open-source-licensing ospo oss-compliance regulated-industry attestation in-toto slsa slsa-provenance
Language:Go 305
bureado / awesome-software-supply-chain-security
A compilation of resources in the software supply chain security domain, with emphasis on open source
reproducible-builds supply-chain-security devsecops vulnerability-scanning security-vulnerability vulnerability-management supply-chain-attacks sbom package-management dependency-management static-analysis software-composition-analysis oss-compliance software-supply-chain software-supply-chain-security dependencies cve-scanning attestation awesome-list
252
nexB / scancode-workbench
:bar_chart: ScanCode Workbench is a desktop app to review and conclude license and origin from code scans generated by ScanCode Toolkit.
scancode oss-compliance software-licensing scancode-workbench
Language:TypeScript 144
Open-Source-Compliance / Sharing-creates-value
This repo realizes the idea that OSS compliance activities will be less expensive by applying OSS principles
oss oss-compliance
Language:Rich Text Format 81
barista
Optum / barista
project barista - open source license and vulnerability management
oss oss-compliance license-management license-scan license-checking
Language:TypeScript 73
opossum-tool / OpossumUI
A light-weight app to audit and inventory large codebases for open source license compliance.
spdx package-dependency remediation license-scan copyright-scan software-composition-analysis codescan oss-compliance software-bill-of-materials
Language:TypeScript 55
rmkanda / tools
Curated list of security tools
cloud dast devsecops kubernetes list osc oss oss-compliance sast scanner security security-tools tools
52
CodeScoring / awesome-open-source-licensing
Cool links, tools & papers related to Open Source Licensing
license licensing software-licensing open-source-licensing license-management license-scan oss-compliance awesome awesome-list
50
package-analysis
Open-Source-Compliance / package-analysis
This repo contains license and copyright analysis results of open source packages. It further contains other license compliance relevant artifacts, which might be of value for others
license-compliance oss-compliance oss-package-analysis copyright-analysis license-analysis
Language:Python 34
oss-review-toolkit / ort-workbench
A desktop workbench for OSS Review Toolkit result files.
oss-compliance oss-review-toolkit
Language:Kotlin 24
nexB / deltacode
DeltaCode: compare two codebase scans (from ScanCode) to detect significant changes.
scancode oss-compliance software-licensing deltacode
Language:Python 19
heriet / hatto
CLI for software license check
license license-checking oss-compliance
Language:Rust 5
iris-GmbH / meta-osselot
bitbake layer repository for intergrating osselot into the build process
bitbake copyright-analysis license-analysis license-compliance oss-compliance oss-package-analysis yocto yocto-layer bitbake-layer osselot
Language:BitBake 5
joshdk / licensor
📝 Detect what license a project is distributed under
golang oss license licenses spdx license-management license-checking license-scan spdx-license oss-compliance compliance
Language:Shell 4
paulveillard / cybersecurity-secure-software-supplychain-lifecyle
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Secure Software Supply Chain Lifecycle in Cybersecurity.
devsecops manifest provenance sbom sbom-generator scanning supply-chain supply-chain-management supply-chain-security vex attestation cve-scanning cve-search dependencies oss-compliance risk-based supply-chain-analytics
2
git-authorship
thehale / git-authorship
See who wrote each line of code in your git repository with interactive reports.
git copyright git-blame oss-compliance reporting spdx education grading hacktoberfest
Language:Python 2
Richardsonjordan92 / webapp2.0
Webapp for custom data usage
android-application config gitlab gitlab-migrated oss-compliance protected public
1
freight-trust / legal
Legal Notifications, EULAs, ToS, GDPR, Software License Assessments and SPDX Licenses that we use
spdx legal license apache-2 bsd-3 cc-nd-nc oss-compliance
Language:Roff
jeremiah / Fossology-Docker-Deploy-Scripts
Deploy scripts for FOSSology Docker container
oss-compliance
Language:Shell
tsteenbe / openchain-spec
OpenChain Specification
open-chain-project oss-compliance spdx licenses open-source linux-foundation
Language:JavaScript
WileyLabs / license-me-maybe
Check a GitHub organization's repositories' license choices
vuejs semantic-ui github oss-compliance oss-licenses
Language:HTML