PQCA / cbomkit-theia
A tool for detecting cryptographic assets in container images and directories, and generating CBOMs.
☆14Updated this week
Alternatives and similar repositories for cbomkit-theia
Users that are interested in cbomkit-theia are comparing it to the libraries listed below
Sorting:
- A toolset for dealing with Cryptography Bill of Materials (CBOM)☆30Updated this week
- This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.☆33Updated this week
- Cryptography Bill of Materials☆67Updated 3 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆80Updated this week
- Network Cryptography Monitor - using eBPF, written in python☆29Updated last month
- in-toto is a framework to secure the software supply chain.☆70Updated 4 months ago
- ☆62Updated 9 months ago
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆94Updated last week
- SPDX Merge tool☆43Updated 3 weeks ago
- PQC Transition Tools Index☆30Updated 2 months ago
- Report on quality of SBOM contents☆17Updated 4 months ago
- Machine-readable specification for the attestation of security-relevant data.☆59Updated this week
- TACOS framework structural details☆20Updated last year
- Tools and utilities needed to parse GitHub Multi-Repository Variant Analysis output☆19Updated 7 months ago
- Format agnostic SBOM tooling☆106Updated this week
- Specification and other related documents.☆46Updated 4 months ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆76Updated 8 months ago
- ☆72Updated last week
- Visualizer for GUAC☆28Updated 2 months ago
- Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.☆64Updated last year
- An experimental (but fully functional) Remote Attestation Engine and Applications for TPM2.0 based systems (cloud, edge, IoT etc)☆24Updated last year
- A place to systematically store software bill of materials (SBOM) documents.☆46Updated last year
- sbomify is an SBOM management platform.☆24Updated this week
- OCSP Responder monitor☆35Updated 9 months ago
- OpenVEX Specification☆150Updated last month
- A BOM repository server for distributing CycloneDX BOMs☆77Updated last year
- Securing open-source package ecosystems by originating, validating, and augmenting build attestations.☆39Updated this week
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"☆67Updated last year
- ☆82Updated this week
- ☆29Updated this week