Alternatives and similar repositories for mdbom

Users that are interested in mdbom are comparing it to the libraries listed below

• anchore / yardstick
  Compare vulnerability scanners results (to make them better!)
  ☆16Updated 3 weeks ago
• anthonyharrison / sbom2doc
  Transform SBOM contents into a formatted document including markdown and PDF formats
  ☆27Updated 4 months ago
• CycloneDX / cyclonedx-web-tool
  A web based tool for working with CycloneDX BOMs
  ☆38Updated 9 months ago
• spdx / spdx-to-osv
  Produce an Open Source Vulnerability JSON file based on information in an SPDX document
  ☆64Updated 11 months ago
• aquasecurity / vexhub
  ☆23Updated last month
• ossf / ossf-landscape
  ☆29Updated last week
• ossf / security-insights-spec
  Machine-readable specification for the attestation of security-relevant data.
  ☆59Updated last week
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆183Updated 3 weeks ago
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆46Updated last year
• philips-labs / slsa-provenance-action
  Github Action implementation of SLSA Provenance Generation
  ☆48Updated this week
• anchore / grype-db
  ☆48Updated this week
• CERTCC / SBOM
  Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data
  ☆59Updated last year
• fossas / fossa-action
  Find license compliance and security issues in your applications with FOSSA and GitHub Actions.
  ☆54Updated this week
• advanced-security / sbom-generator-action
  ☆16Updated 3 months ago
• sbomify / sbomify
  sbomify is an SBOM management platform.
  ☆24Updated this week
• tacosframework / TACOS-spec
  TACOS framework structural details
  ☆20Updated this week
• DefectDojo / Community-Contribs
  DefectDojo Community Content
  ☆18Updated 7 months ago
• interlynk-io / sbomasm
  SBOM Edit - Conditional edits and merging of SBOMs
  ☆69Updated this week
• in-toto / community
  in-toto is a framework to secure the software supply chain.
  ☆70Updated 4 months ago
• CycloneDX / license-scanner
  Utility that provides an API and CLI to identify licenses and legal terms
  ☆44Updated 11 months ago
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated 2 years ago
• sbomtools / apt2sbom
  apt2sbom python package generates SPDX or CycloneDX files from Ubuntu APT and Python packaging information
  ☆22Updated 3 years ago
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆60Updated 2 years ago
• OSSIndex / vulns
  Report missing advisories and corrections on OSS Index
  ☆17Updated 2 years ago
• philips-software / SPDXMerge
  SPDX Merge tool
  ☆43Updated 3 weeks ago
• nyph-infosec / daggerboard
  ☆100Updated 7 months ago
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆120Updated 4 months ago
• SBOMit / specification
  ☆62Updated 10 months ago
• old-xebis / repository-template
  Highly automated, up-to-date, and well-documented repository template. Checks for common problems, Markdown, YAML, Bash, formats, lints, …
  ☆15Updated last year