Topic: cyclonedx Goto Github
Some thing interesting about cyclonedx
Some thing interesting about cyclonedx
cyclonedx,:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
Organization: aboutcode-org
Home Page: https://github.com/aboutcode-org/scancode-toolkit/releases/
cyclonedx,ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!
Organization: aboutcode-org
Home Page: https://scancodeio.readthedocs.io
cyclonedx,A vulnerability scanner for container images and filesystems
Organization: anchore
cyclonedx,CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Organization: anchore
cyclonedx,A tool to generate a SBOM (Software Bill of Materials) for an installed Python module
User: anthonyharrison
cyclonedx,This tool compares two Software Bill of Materials (SBOMs) and reports the differences.
User: anthonyharrison
cyclonedx,Chainloop is an Open Source evidence store for your Software Supply Chain attestations, SBOMs, VEX, SARIF, CSAF files, QA reports, and more.
Organization: chainloop-dev
Home Page: https://docs.chainloop.dev
cyclonedx,A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
Organization: cyclonedx
Home Page: https://cyclonedx.org
cyclonedx,Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server.
Organization: cyclonedx
Home Page: https://cyclonedx.github.io/cdxgen/
cyclonedx,A BOM repository server for distributing CycloneDX BOMs
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,CycloneDX SBOM Model and Utils for Creating and Validating BOMs
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
Organization: cyclonedx
Home Page: https://cyclonedx.org
cyclonedx,Python implementation of OWASP CycloneDX
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,A web based tool for working with CycloneDX BOMs
Organization: cyclonedx
Home Page: https://cyclonedx.github.io/cyclonedx-web-tool
cyclonedx,Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,GitHub action to generate a CycloneDX SBOM for Node.js
Organization: cyclonedx
cyclonedx,Utility that provides an API platform for validating, querying and managing BOM data
Organization: cyclonedx
cyclonedx,OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
Organization: cyclonedx
Home Page: https://cyclonedx.org/
cyclonedx,A standard API specification for exchanging supply chain artifacts and intelligence
Organization: cyclonedx
Home Page: https://tc54.org/
cyclonedx,Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Organization: dependencytrack
Home Page: https://dependencytrack.org/
cyclonedx,Scans Software Bill of Materials (SBOMs) for security vulnerabilities
Organization: devops-kung-fu
cyclonedx,SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.
Organization: interlynk-io
cyclonedx,SBOM Grep - search through SBOMs
Organization: interlynk-io
cyclonedx,SBOM quality score - Quality metrics for your sboms
Organization: interlynk-io
cyclonedx,🎁 wraps all package managers with a unifying CLI
User: kdeldycke
Home Page: https://kdeldycke.github.io/meta-package-manager
cyclonedx,A software bill of materials (SBoM) generator for Swift packages
User: lsto
cyclonedx,Nix CycloneDX Software Bills of Materials (SBOMs)
User: nikstur
cyclonedx,A suite of tools to automate software compliance checks.
Organization: oss-review-toolkit
Home Page: https://oss-review-toolkit.org
cyclonedx,Run ORT in your GitHub action workflow to do licensing, security and best practices checks and generate reports/SBOMs
Organization: oss-review-toolkit
cyclonedx,BLint is a Binary Linter to check the security properties, and capabilities in your executables. Since v2, blint is also an SBOM generator for binaries.
Organization: owasp-dep-scan
cyclonedx,OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
Organization: owasp-dep-scan
Home Page: https://owasp.org/www-project-dep-scan/
cyclonedx,Creates CycloneDX Software Bill-of-Materials (SBOM) from Go projects. So you can use it with DependencyTrack to monitor security issues in 3rd party modules.
Organization: ozonru
cyclonedx,A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
Organization: package-url
Home Page: https://github.com/package-url/purl-spec
cyclonedx,A tool to generate SBOM (Software Bill of Material) from source code artifacts.
User: patriksvensson
cyclonedx,The Continuous Clearing Tool scans and collects the 3rd party OSS components used in a NPM/NuGet/Debian/Maven/Python/Conan/Aipine project and uploads it to SW360 and Fossology by accepting respective project ID for license clearing.
Organization: siemens
cyclonedx,A suite of utilities to help with software supply chain challenges on nix targets
Organization: tiiuae
cyclonedx,Genealogos, a Nix sbom generator
Organization: tweag
cyclonedx,OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
Organization: xmirrorsecurity
Home Page: https://opensca.xmirror.cn
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.