sbom-tool

Star

Here are 51 public repositories matching this topic...

Language:All

Filter by language

All51 Python17 Go9 JavaScript5 HTML4 C#3 Java3 Shell3 TypeScript2 PHP1 PowerShell1

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

RetireJS /retire.js

Sponsor

Star3.8k

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

javascript chrome-extension security scanner grunt-plugins firefox-extension build-tool vulnerabilities software-composition-analysis vulnerable-libraries insecure-libraries sbom sbom-generator sbom-tool

UpdatedMar 17, 2025
JavaScript

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

python security vulnerability vulnerabilities cve hacktoberfest cvss security-automation security-tools devsecops system-tools sbom swrepo sbom-tool

UpdatedMar 20, 2025
Python

ARPSyndicate /puncia

Star644

Panthera(P.)uncia - Official CLI utility for Osprey Vision, Subdomain Center & Exploit Observer.

exploit subdomain vulnerability sbom cyclonedx arpsyndicate sbom-tool cyclonedx-sbom

UpdatedFeb 23, 2025
Python

CycloneDX /cyclonedx-python

Star274

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

python environment poetry conda owasp python3 pip bom spdx hacktoberfest requirements bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator sbom-tool

UpdatedMar 18, 2025
Python

interlynk-io /sbomqs

Star196

SBOM quality score - Quality metrics for your sboms

go golang spdx security-tools sbom cyclonedx devsecops-pipeline supply-chain-security sbom-examples sbom-tool sbom-quality sbom-score sbom-samples

UpdatedMar 17, 2025
Go

tiiuae /sbomnix

Star161

A suite of utilities to help with software supply chain challenges on nix targets

python security nix static-analysis dependencies cpe software-supply-chain vulnerability-scanners bill-of-materials software-bill-of-materials purl sbom cyclonedx sbom-generator software-supply-chain-security spdx-sbom sbom-tool

UpdatedMar 20, 2025
Python

snyk /parlay

Star161

Enrich SBOMs with data from third party services

snyk sbom cyclonedx sbom-tool

UpdatedFeb 10, 2025
Go

CycloneDX /cyclonedx-node-module

Star126

creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects

nodejs node dependency-graph bom metapackage meta-package software-bill-of-materials sbom cyclonedx sbom-generator sbom-tool

UpdatedFeb 8, 2025

CycloneDX /sbom-utility

Star104

Utility that provides an API platform for validating, querying and managing BOM data

owasp bom vex vdr spdx spdx-license hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom spdx-sbom sbom-tool sbom-quality

UpdatedNov 19, 2024
Go

CycloneDX /cyclonedx-node-npm

Star82

Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

nodejs npm node dependency-graph owasp bom hacktoberfest bill-of-materials software-bill-of-materials sbom cyclonedx sbom-generator sbom-tool

UpdatedMar 19, 2025
JavaScript

interlynk-io /sbomasm

Star63

SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.

go golang security oss spdx devsecops sbom gomodule cyclonedx sbom-generator sbom-tool

UpdatedMar 17, 2025
Go

CycloneDX /cyclonedx-php-composer

Star61

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

php composer dependency-graph owasp bom composer-plugin spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator sbom-tool

UpdatedMar 18, 2025
PHP

spdx /ntia-conformance-checker

Star60

Check SPDX SBOM for NTIA minimum elements

spdx sbom sbom-tool

UpdatedMar 12, 2025
Python

anthonyharrison /sbomdiff

Sponsor

Star31

This tool compares two Software Bill of Materials (SBOMs) and reports the differences.

tools spdx devsecops sbom cyclonedx sbom-tool

UpdatedOct 29, 2024
Python

IBM /sonar-cryptography

Star30

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

cryptography sonarqube sonar post-quantum-cryptography quantum-safe post-quantum sbom sbom-tool crypto-scanner cbom cryptographic-inventory cbom-tool cryptography-bom cbomkit

UpdatedMar 20, 2025
Java

CycloneDX /cyclonedx-webpack-plugin

Star26

Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

javascript webpack webpack-plugin owasp bom spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator mbom sbom-tool

UpdatedMar 18, 2025
JavaScript

IBM /cbomkit

Star26

A toolset for dealing with Cryptography Bill of Materials (CBOM)

cryptography post-quantum-cryptography quantum-safe post-quantum sbom sbom-tool crypto-scanner cbom cryptographic-inventory cbom-tool cryptography-bom cbomkit

UpdatedMar 20, 2025
Java

SecureStackCo /actions-sbom

Star25

A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements, and has the SBOM to show it!

security security-audit deployment o security-automation bill-of-materials automation-testing deployment-automation sbom sbom-generator sbom-distribution sbom-repository sbom-tool