software-bill-of-materials

There are 6 repositories under software-bill-of-materials topic.

• XmirrorSecurity / OpenSCA-cli

  OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

  scadevsecopssecuritysbomsoftware-bill-of-materialssoftware-composition-analysissoftware-supply-chainsoftware-supply-chain-securitystatic-analysisvulnerabilitieslicense-compliancecyclonedxspdxswid
  Language:Go 1037

• CycloneDX / cdxgen

  Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962

  bomcbomcontainerscyclonedxdockerociowasppackage-urlpurlsaasbomsbomscasoftware-bill-of-materialssupply-chain
  Language:JavaScript 504

• awesomeSBOM / awesome-sbom

  A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

  awesomeawesome-reposawesome-sbomsbomsbom-examplessbom-generatorsoftware-bill-of-materials
  449

• microsoft / component-detection

  Scans your project to determine what components you use

  dependenciespackage-managementsbomsoftware-bill-of-materialssoftware-composition-analysisstatic-analysis
  Language:C# 398
• specification

  CycloneDX / specification

  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

  bill-of-materialsbomsoftwarespdxcpelicensesoftware-bill-of-materialssbomcyclonedxswidowaspsupply-chainstandardspecificationsaasbomvexmbommachine-learningcbomtc54
  Language:XSLT 345
• cyclonedx-maven-plugin

  CycloneDX / cyclonedx-maven-plugin

  Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

  bill-of-materialsbomcyclonedxmavenmaven-pluginmbomobomowasppackage-urlpurlsaasbomsbomsbom-generatorsoftware-bill-of-materialsspdxvex
  Language:Java 283
• cyclonedx-cli

  CycloneDX / cyclonedx-cli

  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

  bill-of-materialsbomcyclonedxhacktoberfestmbomobomowasppackage-urlpurlsaasbomsbomsbom-generatorsoftware-bill-of-materialsspdxvex
  Language:C# 281
• cyclonedx-python

  CycloneDX / cyclonedx-python

  CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

  bill-of-materialsbomcondacyclonedxenvironmentowasppackage-urlpippoetrypurlpythonpython3requirementssbomsbom-generatorsbom-toolsoftware-bill-of-materialsspdx
  Language:Python 228
• cyclonedx-dotnet

  CycloneDX / cyclonedx-dotnet

  Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

  bill-of-materialsbomcyclonedxdotnetdotnet-corehacktoberfestmbomobomowasppackage-urlpurlsaasbomsbomsbom-generatorsoftware-bill-of-materialsspdxvex
  Language:C# 169
• bom-examples

  CycloneDX / bom-examples

  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)

  cyclonedxsoftware-bill-of-materialssbombombill-of-materialsowaspsbom-examplesobommbomvexsaasbom
  162
• cyclonedx-gradle-plugin

  CycloneDX / cyclonedx-gradle-plugin

  Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

  bill-of-materialsbomcyclonedxgradlegradle-pluginowasppackage-urlpurlsbomsbom-generatorsoftware-bill-of-materialsspdx
  Language:Java 147
• cyclonedx-gomod

  CycloneDX / cyclonedx-gomod

  Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

  bill-of-materialsbomgo-modulesgolangmbomobomowaspsaasbomsbomsbom-generatorsoftware-bill-of-materialsvex
  Language:Go 128
• cyclonedx-node-module

  CycloneDX / cyclonedx-node-module

  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects

  bomcyclonedxdependency-graphmeta-packagemetapackagenodenodejssbomsbom-generatorsbom-toolsoftware-bill-of-materials
  121

• tiiuae / sbomnix

  A suite of utilities to help with software supply chain challenges on nix targets

  cyclonedxnixsbomsbom-generatorsbom-toolpythonbill-of-materialscpedependenciespurlsoftware-bill-of-materialssecurityspdx-sbomstatic-analysisvulnerability-scannerssoftware-supply-chainsoftware-supply-chain-security
  Language:Python 109

• CycloneDX / sbom-utility

  Utility that provides an API platform for validating, querying and managing BOM data

  bill-of-materialsbomcyclonedxhacktoberfestmbomobomowasppackage-urlpurlsaasbomsbomsbom-qualitysbom-toolsoftware-bill-of-materialsspdxspdx-licensespdx-sbomvdrvex
  Language:Go 83
• cyclonedx-rust-cargo

  CycloneDX / cyclonedx-rust-cargo

  Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

  bill-of-materialsbomcargocargo-plugincyclonedxmbomobomowasppackage-urlpurlrustsaasbomsbomsbom-generatorsoftware-bill-of-materialsspdxvex
  Language:Rust 79

• intelops / compage

  Compage - Low-Code Framework to develop Rest API, gRPC, dRPC, GraphQL, WebAssembly, microservices, FaaS, Temporal workloads, IoT and edge services, K8s controllers, K8s CRDs, K8s custom APIs, K8s Operators, K8s hooks, etc. with minimal coding and by automatically applying best practice methods like software supply chain security measures, SBOM, openAPI, cloudevents, etc. Auto generate code after defining requirements in UI as diagram.

  backend-servicescode-generationcontainerizationcontainersgraphqlgrpclow-codemicroservicessbom-generatorsoftware-bill-of-materialssoftware-supply-chain-securitywebassemblyrest-apigolangrustserverlesscosignvisual-applicationsno-codehacktoberfest
  Language:Go 79
• cyclonedx-core-java

  CycloneDX / cyclonedx-core-java

  CycloneDX SBOM Model and Utils for Creating and Validating BOMs

  bomspdxbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspobommbomsaasbomvexlibrary
  Language:Java 76
• cyclonedx-bom-repo-server

  CycloneDX / cyclonedx-bom-repo-server

  A BOM repository server for distributing CycloneDX BOMs

  bill-of-materialsbomcyclonedxmbomobomowaspsaasbomsbomsbom-distributionsbom-repositorysoftware-bill-of-materialsvex
  Language:C# 72
• cyclonedx-go

  CycloneDX / cyclonedx-go

  Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  bombill-of-materialssbomsoftware-bill-of-materialsgolangowaspobommbomsaasbomvexlibrary
  Language:Go 69
• cyclonedx-node-npm

  CycloneDX / cyclonedx-node-npm

  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

  bill-of-materialsbomcyclonedxdependency-graphnodenodejsnpmowaspsbomsbom-generatorsbom-toolsoftware-bill-of-materials
  Language:TypeScript 67
• cyclonedx-python-lib

  CycloneDX / cyclonedx-python-lib

  Python implementation of OWASP CycloneDX

  pythonowaspbomspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedxobommbomsaasbomvexsoftware-libraryattestationcbomlibrary
  Language:Python 61

• opossum-tool / OpossumUI

  A light-weight app to audit and inventory large codebases for open source license compliance.

  spdxpackage-dependencyremediationlicense-scancopyright-scansoftware-composition-analysiscodescanoss-compliancesoftware-bill-of-materials
  Language:TypeScript 57

• nikstur / bombon

  Nix CycloneDX Software Bills of Materials (SBOMs)

  cyclonedxnixnixossbombill-of-materialsbomsoftware-bill-of-materialslicensesbom-generatorcomponentsdependenciespurlspdx
  Language:Rust 56

• goreleaser / goreleaser-example-supply-chain

  Example goreleaser + github actions config with keyless signing and SBOM generation

  goreleasergolanggosupply-chaincosignsigningsigstoresoftware-bill-of-materialssbomsyft
  Language:Go 55
• cyclonedx-php-composer

  CycloneDX / cyclonedx-php-composer

  Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

  bill-of-materialsbomcomposercomposer-plugincyclonedxdependency-graphowasppackage-urlphppurlsbomsbom-generatorsbom-toolsoftware-bill-of-materialsspdx
  Language:PHP 47
• cyclonedx-linux-generator

  CycloneDX / cyclonedx-linux-generator

  Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions

  bombill-of-materialssoftware-bill-of-materialssbomcyclonedxlinuxowaspsbom-generator
  Language:Java 38
• transparency-exchange-api

  CycloneDX / transparency-exchange-api

  A standard API specification for exchanging supply chain artifacts and intelligence

  api-specbill-of-materialsbomcyclonedxowaspsbomsbom-distributionsoftware-bill-of-materialsspecificationtc54
  35
• cyclonedx-web-tool

  CycloneDX / cyclonedx-web-tool

  A web based tool for working with CycloneDX BOMs

  bombill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedxowaspobommbomsaasbomvex
  Language:HTML 27
• cyclonedx-webpack-plugin

  CycloneDX / cyclonedx-webpack-plugin

  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

  bomspdxbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxwebpack-pluginwebpackowaspsbom-generatormbomjavascriptsbom-tool
  Language:JavaScript 24
• gh-node-module-generatebom

  CycloneDX / gh-node-module-generatebom

  GitHub action to generate a CycloneDX SBOM for Node.js

  bill-of-materialsbomcyclonedxgh-actiongithub-actionnodenodejsowaspsbomsbom-generatorsoftware-bill-of-materials
  Language:JavaScript 20

• cloudlinux / securechain-java

  TuxCare SecureChain enhances Java supply chain security through vetted libraries, vulnerability fixes, and extended support. Ideal for enterprise-level compliance and secure development.

  compliance-managementdependency-managemententerprise-securityjava-securityopen-source-securitysbomsoftware-bill-of-materialssupply-chain-securityvulnerability-assessmententerprise-security-compliancejava-dependency-managementjava-libraries-vettingjava-supply-chain-securityoss-vulnerability-remediation
  19
• cyclonedx-cocoapods

  CycloneDX / cyclonedx-cocoapods

  Creates CycloneDX Software Bill-of-Materials (SBOM) from Objective-C and Swift projects that use CocoaPods.

  bomobjective-cswiftcocoapodsbill-of-materialssoftware-bill-of-materialssbomcyclonedxowaspsbom-generatorobommbomsaasbomvex
  Language:Ruby 19
• cyclonedx-ruby-gem

  CycloneDX / cyclonedx-ruby-gem

  Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

  bomspdxrubygembundlerbill-of-materialssoftware-bill-of-materialspackage-urlpurlsbomcyclonedxowaspsbom-generatorobommbomsaasbomvex
  Language:Ruby 19
• sbom-comparator

  CycloneDX / sbom-comparator

  Lockheed Martin developed utility to compare two CycloneDX SBOMs

  bombill-of-materialssoftware-bill-of-materialssbomcyclonedxowasp
  Language:Java 18

• CMS-Enterprise / sbom-harbor

  Repository for the SBOM Harbor.

  sbomsoftware-bill-of-materialssoftware-supply-chainsoftware-supply-chain-security
  Language:Rust 17