sbom-tool

There are 4 repositories under sbom-tool topic.

• RetireJS / retire.js

  scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

  vulnerabilitiesscannerfirefox-extensiongrunt-pluginsjavascriptvulnerable-librariesinsecure-librarieschrome-extensionbuild-toolsecuritysoftware-composition-analysissbomsbom-generatorsbom-tool
  Language:JavaScript 3636

• intel / cve-bin-tool

  The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

  cvecvssdevsecopshacktoberfestpythonsbomsbom-toolsecuritysecurity-automationsecurity-toolsswreposystem-toolsvulnerabilitiesvulnerability
  Language:Python 1172

• ARPSyndicate / puncia

  The Panthera(P.)uncia of Cybersecurity - Official CLI utility for Subdomain Center & Exploit Observer.

  arpsyndicatecyclonedxcyclonedx-sbomexploitsbomsbom-toolsubdomainvulnerability
  Language:Python 632
• cyclonedx-python

  CycloneDX / cyclonedx-python

  CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

  pythonpipbomsbomspdxbill-of-materialssoftware-bill-of-materialspackage-urlpurlcyclonedxowaspsbom-generatorpython3poetrycondarequirementsenvironmentsbom-tool
  Language:Python 238

• interlynk-io / sbomqs

  SBOM quality score - Quality metrics for your sboms

  golangcyclonedxspdxsbomsbom-examplessbom-toolgosbom-qualitysbom-scoresbom-samplesdevsecops-pipelinesecurity-toolssupply-chain-security
  Language:Go 155
• cyclonedx-node-module

  CycloneDX / cyclonedx-node-module

  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects

  cyclonedxmeta-packagemetapackagebomnodenodejssbomsoftware-bill-of-materialsdependency-graphsbom-generatorsbom-tool
  121

• tiiuae / sbomnix

  A suite of utilities to help with software supply chain challenges on nix targets

  cyclonedxnixsbomsbom-generatorsbom-toolpythonbill-of-materialscpedependenciespurlsoftware-bill-of-materialssecurityspdx-sbomstatic-analysisvulnerability-scannerssoftware-supply-chainsoftware-supply-chain-security
  Language:Python 116

• snyk / parlay

  Enrich SBOMs with data from third party services

  snykcyclonedxsbomsbom-tool
  Language:Go 102

• CycloneDX / sbom-utility

  Utility that provides an API platform for validating, querying and managing BOM data

  sbombomcyclonedxsbom-toolspdxspdx-sbomvexspdx-licensebill-of-materialshacktoberfestmbomobomowasppackage-urlpurlsaasbomsoftware-bill-of-materialsvdrsbom-quality
  Language:Go 86
• cyclonedx-node-npm

  CycloneDX / cyclonedx-node-npm

  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

  bill-of-materialsbomcyclonedxnodenodejsnpmsbomsbom-generatorsoftware-bill-of-materialsdependency-graphsbom-toolowasp
  Language:JavaScript 69

• interlynk-io / sbomasm

  SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.

  gogolangcyclonedxdevsecopsgomoduleosssbomsbom-generatorsbom-toolsecurityspdx
  Language:Go 50

• spdx / ntia-conformance-checker

  Check SPDX SBOM for NTIA minimum elements

  sbomsbom-tool
  Language:Python 50
• cyclonedx-php-composer

  CycloneDX / cyclonedx-php-composer

  Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

  bomspdxphpcomposer-pluginbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspsbom-generatorcomposerdependency-graphsbom-tool
  Language:PHP 48
• actions-sbom

  SecureStackCo / actions-sbom

  A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements, and has the SBOM to show it!

  automation-testingbill-of-materialsdeploymentdeployment-automationosbomsbom-distributionsbom-generatorsbom-repositorysbom-toolsecuritysecurity-auditsecurity-automation
  25
• cyclonedx-webpack-plugin

  CycloneDX / cyclonedx-webpack-plugin

  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

  bomspdxbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxwebpack-pluginwebpackowaspsbom-generatormbomjavascriptsbom-tool
  Language:JavaScript 24

• anthonyharrison / sbomdiff

  This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

  cyclonedxsbomspdxdevsecopstoolssbom-tool
  Language:Python 23

• IBM / sonar-cryptography

  This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

  cbomcrypto-scannerpost-quantumpost-quantum-cryptographyquantum-safesbomsbom-toolsonarsonarqubecbom-toolcryptographic-inventorycryptographycryptography-bom
  Language:Java 20

• interlynk-io / sbomgr

  SBOM Grep - search through SBOMs

  cyclonedxdevsecopsdevsecops-pipelinegogolanggomodulesbom-toolspdxsupplychain
  Language:Go 19
• cyclonedx-node-yarn

  CycloneDX / cyclonedx-node-yarn

  Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.

  nodeyarnyarn-pluginbomsbombill-of-materialssoftware-bill-of-materialscyclonedxsbom-generatornodejssbom-tool
  Language:JavaScript 18

• anthonyharrison / lib4sbom

  Library to ingest and generate SBOMs

  cyclonedxdevsecopslibrarymlbompythonsbomsbom-generatorsbom-toolspdx
  Language:Python 16

• morpheuslord / Startup-SBOM

  A tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service and versions.

  linuxreverse-engineeringsbomsbom-toolstartupstartup-scriptapt-packageslinux-apppackage-resolverrpm-packacyclonedx
  Language:Python 15

• anthonyharrison / sbom2doc

  Transform SBOM contents into a formatted document including markdown and PDF formats

  sbomsbom-toolcyclonedxdevsecopsmarkdown-generatorpdf-generationspdx
  Language:Python 14

• interlynk-io / sbomex

  Find & pull public SBOMs

  gogolangsbomsbom-distributionsbom-repositorysbom-toolsbom-examplessbom-samples
  Language:Go 13

• philips-software / sbom-tool-installer-action

  GitHub Action that installs and sets up the Microsoft SBOM Tool.

  actionssbomsbom-tool
  Language:TypeScript 10
• freshli-cli

  corgibytes / freshli-cli

  A tool for displaying historical metrics about a project's dependencies. Run the Freshli CLI on your project to see how its dependency freshness changes over time.

  dependencieslibyearsbom-toolmetrics
  Language:C# 8

• SoftwareDesignLab / SBOM-in-a-Box

  SBOM-in-a-Box is a unified platform to promote the production, consumption, and utilization of Software Bills of Materials.

  comparison-toolcyclonedxdocker-composeguisbomsbom-generatorsbom-qualitysbom-toolspdxvexvulnerability-exploitability-exchange
  Language:Java 8

• anthonyharrison / sbom-manager

  Manage collection of SBOMs (Software Bill of Materials)

  sbomspdxcyclonedxvulnerabilitiessecuritydevsecopssbom-repositorysbom-tool
  Language:Python 7

• anthonyharrison / sbom2dot

  Create a dependency graph of the components within a SBOM

  cyclonedxgraphviz-dot-languagesbomsbom-toolspdx
  Language:Python 7

• anthonyharrison / sbom4files

  SBOM generator for files within a directory

  cyclonedxdevsecopssbomsbom-generatorsbom-toolspdxtool
  Language:Python 7

• CycloneDX / cyclonedx-buildroot

  Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects

  bombill-of-materialsbuildrootcyclonedxsbomsbom-generatorsbom-toolsoftware-bill-of-materials
  Language:Python 7

• dineshr93 / sq

  An SPDX Querying Binary

  sbomsbom-tool
  Language:Go 7

• bigdawgsfootball / SBOM-Researcher

  Looks up package vulnerability info in OSV DB from SBOMs

  sbomsbom-readersbom-toolsbom-researchcyclonedxspdx
  Language:PowerShell 3

• higolab / Osmy

  Osmy: A tool for software management using SPDX Documents

  sbomsbom-toolspdx
  Language:C# 2

• PowerCommands / SecTools

  PainKiller Security Tools

  cmdcmdlinecyclonedxdependency-trackdependency-trackerdependency-trackingowaspowasp-dependencychecksbomsbom-generatorsbom-toolpower-commandsdockerdocker-desktop
  Language:C# 2

• anthonyharrison / sbomdebt

  Determine the technical debt for a Software Bill of Materials (SBOM)

  cyclonedxdevsecopssbomsbom-toolsecurityspdxtechnical-debt
  Language:Python 1

• krishnaduttPanchagnula / parlayaction

  This repo hosts a github action to run parlay( which is used to Enrich SBOMs with data from third party services ) in piplines

  cyclonedxcyclonedx-sbomparlaysbomsbom-toolsnykdevsecopsgithub-actionsscannerscanningsecuritytoolsvulnerability
  Language:Shell 1