IBM / cbomkit
A toolset for dealing with Cryptography Bill of Materials (CBOM)
☆14Updated this week
Related projects ⓘ
Alternatives and complementary repositories for cbomkit
- This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.☆26Updated this week
- A standard API specification for exchanging supply chain artifacts and intelligence☆59Updated this week
- Cryptography Bill of Materials☆58Updated last month
- Utility that provides an API platform for validating, querying and managing BOM data☆95Updated this week
- OpenVEX Specification☆131Updated 4 months ago
- Format agnostic SBOM tooling☆81Updated this week
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆126Updated 9 months ago
- Generate a score for your sbom to understand if it will actually be useful.☆221Updated 3 months ago
- Repository for on-going work as part of the AIBOM Tiger Team effort.☆17Updated 2 months ago
- Visualizer for GUAC☆26Updated 3 weeks ago
- ☆61Updated 4 months ago
- A tool to create, transform and attest VEX metadata☆118Updated last week
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆180Updated last week
- Enrich SBOMs with data from third party services☆120Updated this week
- A BOM repository server for distributing CycloneDX BOMs☆74Updated 8 months ago
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆150Updated this week
- CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.☆314Updated 3 weeks ago
- ☆228Updated this week
- Potential WG on Artificial Intelligence and Machine Learning (AI/ML)☆53Updated 3 weeks ago
- Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.☆61Updated this week
- Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev☆11Updated last month
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆190Updated 2 months ago
- ☆25Updated last year
- SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.☆57Updated 3 weeks ago
- A compilation of resources in the software supply chain security domain, with emphasis on open source☆291Updated last year
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆73Updated this week
- ☆101Updated last month
- ☆16Updated 6 months ago
- OWASP Foundation Web Respository☆54Updated last year
- Check SPDX SBOM for NTIA minimum elements☆53Updated last week