CycloneDX / cyclonedx-property-taxonomy
A taxonomy of all official CycloneDX property namespaces and names
☆14Updated last month
Alternatives and similar repositories for cyclonedx-property-taxonomy:
Users that are interested in cyclonedx-property-taxonomy are comparing it to the libraries listed below
- The model for the information captured in SPDX version 3 standard.☆73Updated this week
- Utility that converts SBOM documents from CycloneDX to SPDX☆29Updated last year
- Utility that provides an API platform for validating, querying and managing BOM data☆98Updated last month
- ☆101Updated 3 months ago
- PURL to CPE Relationship mapping project.☆82Updated this week
- SPDX Merge tool☆39Updated 4 months ago
- Check SPDX SBOM for NTIA minimum elements☆58Updated this week
- A standard API specification for exchanging supply chain artifacts and intelligence☆67Updated last month
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆32Updated last year
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆76Updated last month
- A web based tool for working with CycloneDX BOMs☆33Updated 5 months ago
- Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents☆19Updated this week
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆62Updated 7 months ago
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆83Updated this week
- OPENSSF SECURITY INSIGHTS: Repository for development of the draft standard, where requests for modification should be made via Github Is…☆56Updated this week
- SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.☆61Updated 2 weeks ago
- SBOM quality score - Quality metrics for your sboms☆192Updated this week
- OpenSSF Endusers Working Group☆28Updated 9 months ago
- Automating Compliance Tooling Project☆20Updated 2 years ago
- Measure release insights and recommendations for open-source dependencies. Note: this project is archived.☆11Updated 2 years ago
- Format agnostic SBOM tooling☆94Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆224Updated 5 months ago
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆155Updated this week
- OpenSSF Working Group on Securing Software Repositories☆94Updated 2 months ago
- A light-weight app to audit and inventory large codebases for open source license compliance.☆60Updated this week
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Updated 2 months ago
- Examples of SPDX files for software combinations☆125Updated last week
- OpenVEX Specification☆139Updated 6 months ago
- A specification including, problem statement, use cases, requirements, and architectural constituents for a Transparency Service in suppo…☆14Updated last year
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆57Updated 9 months ago