cyclonedx-sbom

GUAC aggregates software security metadata into a high fidelity graph database.

Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.

ReARM - Release Governance Platform

AI SBOM: AI Software Bill of Materials - The Supply Chain for Artificial Intelligence

A Java library for creating and consuming SBOMs in Standard BOM format

A library and CLI to work with CSAF and SBOM data

A Python library for creating and consuming SBOMs in Standard BOM format

日本市場向けオープンソースSBOM管理ダッシュボード / Open-source SBOM management dashboard with NVD/JVN vulnerability correlation, Japanese UI, and METI guidelines compliance

A lightweight Go library for validating Software Bill of Materials (SBOM) against industry-standard specifications

Go CLI tool that scans a repository for Hugging Face model usage and emits a CycloneDX AI/ML Bill of Materials.

A Crystal tool for generating CycloneDX Software Bill of Materials (SBOM) from Crystal shard projects.

Benchmark Dataset for Evaluating Software Composition Analysis Tools

Trusted AIBOM generation

A client-side Blazor WebAssembly application for viewing, validating, and exploring Software Bill of Materials (SBOM) files. Supports CycloneDX (1.6, 1.7) and SPDX (2.2, 2.3) JSON formats with automatic format detection, validation, dependency visualization, and a dynamic UI generated directly from the uploaded SBOM. All processing happens locally

Command line tool and python package for interacting with Timesys Vigiles APIs

A SonarQube plugin that brings the CycloneDX Sunshine SBOM visualization directly into SonarQube, per project.

A web application that runs in your browser to visualize the dependencies of a CycloneDX SBOM.

A Python tool to generate Software Bill of Materials (SBOM) for multiple languages.

Type-safe CycloneDX SBOM parser for PHP

This repo hosts a github action to run parlay( which is used to Enrich SBOMs with data from third party services ) in piplines