sbom-generator · GitHub Topics

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

vulnerabilities scanner Firefox 插件 JavaScript Chrome 插件 build-tool 安全 software-composition-analysis sbom sbom-generator

JavaScript 3.78 k

7 天前

microsoft / sbom-tool

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

sbom sbom-generator

C# 1.73 k

6 小时前

oss-review-toolkit / ort

A suite of tools to automate software compliance checks.

Package manager 依赖管理 dependency-graph license copyright spdx compliance license-management sbom sbom-generator open-source-licensing ospo cyclonedx sca Hacktoberfest cra dora

Kotlin 1.69 k

13 小时前

lunasec-io / lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTra...

翻译 - LunaSec - 安全性和合规性 SDK，可阻止软件中的数据泄漏。只需几行代码，LunaSec 就在您的堆栈中添加了零信任架构、独特的每记录加密以及针对 XSS、SQL 注入和 RCE 等常见安全问题的保护。在这里现场试用：https://app.lunasec.dev

tokenization web-security compliance 安全 soc2 pci-dss gdpr zero-trust devsecops log4shell dependency-analysis scanning Cybersecurity scanning-tool cve-scanning sbom sbom-generator Continuous Delivery (CD)software-composition-analysis

TypeScript 1.45 k

10 个月前

awesomeSBOM / awesome-sbom

A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

sbom sbom-generator awesome-repos Awesome Lists

506

4 个月前

trailofbits / it-depends

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

sbom-generator sbom dependency-analysis dependency-graph vulnerability-scanner Hacktoberfest hacktoberfest2021

Python 351

3 个月前

CycloneDX / cyclonedx-cli

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

bom bill-of-materials purl package-url sbom cyclonedx spdx owasp sbom-generator vex Hacktoberfest

C# 341

4 个月前

CycloneDX / cyclonedx-maven-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

bom spdx Maven maven-plugin bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator vex

Java 313

15 天前

CycloneDX / cyclonedx-python

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

Python pip bom sbom spdx bill-of-materials package-url purl cyclonedx owasp sbom-generator poetry conda requirements environment Hacktoberfest

Python 273

2 天前

CycloneDX / cyclonedx-dotnet

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

bom spdx .NET bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator Hacktoberfest vex

C# 204

12 小时前

CycloneDX / cyclonedx-gradle-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

bom spdx Gradle gradle-plugin bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator

Java 180

17 小时前

tiiuae / sbomnix

A suite of utilities to help with software supply chain challenges on nix targets

cyclonedx Nix sbom sbom-generator Python bill-of-materials 依赖管理 purl 安全 static-analysis vulnerability-scanners software-supply-chain software-supply-chain-security

Python 151

1 个月前

CycloneDX / cyclonedx-gomod

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

bill-of-materials bom sbom Go go-modules owasp sbom-generator vex

Go 146

3 天前

CycloneDX / cyclonedx-node-module

creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects

cyclonedx bom Node.js sbom dependency-graph sbom-generator

126

1 个月前

CycloneDX / cyclonedx-rust-cargo

Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

bom spdx Rust cargo cargo-plugin bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator vex

Rust 122

8 天前

intelops / compage

Compage - Low-Code Framework to develop Rest API, gRPC, dRPC, GraphQL, WebAssembly, microservices, FaaS, Temporal workloads, IoT and edge services, K8s controllers, K8s CRDs, K8s custom APIs, K8s Oper...

backend-services code-generation containerization containers GraphQL gRPC 低代码微服务 sbom-generator software-supply-chain-security WebAssembly REST API Go Rust Serverless cosign visual-applications 无代码 Hacktoberfest

Go 84

7 个月前

CycloneDX / cyclonedx-node-npm

Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

bill-of-materials bom cyclonedx Node.js npm sbom sbom-generator dependency-graph owasp Hacktoberfest

JavaScript 79

11 天前

nikstur / bombon

Nix CycloneDX Software Bills of Materials (SBOMs)

cyclonedx Nix sbom bill-of-materials bom license sbom-generator components 依赖管理 purl spdx

Rust 76

1 个月前

oxsecurity / codetotal

Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security, vulnerability, insecure infrastructure as code, and potenti...

code-quality-analyzer Infrastructure as code sast secrets-detection 安全 sbom sbom-generator vulnerability-scanners supply-chain-security

TypeScript 76

7 个月前

interlynk-io / sbomasm

SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.

Go cyclonedx devsecops Open Source sbom sbom-generator 安全 spdx

Go 61

16 天前