Wind-River / meta-wr-sbomLinks
A CLI tool for generating a Software Bill of Materials (SBOM) from Yocto Project.
☆22Updated last month
Alternatives and similar repositories for meta-wr-sbom
Users that are interested in meta-wr-sbom are comparing it to the libraries listed below
Sorting:
- ☆102Updated last year
- Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber☆199Updated this week
- Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions☆48Updated 3 weeks ago
- Examples of SPDX files for software combinations☆137Updated 4 months ago
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆65Updated last year
- Check SPDX SBOM for NTIA minimum elements☆73Updated this week
- Cryptography Bill of Materials☆74Updated last month
- Utility that converts SBOM documents from CycloneDX to SPDX☆34Updated last year
- Wind River Linux Setup -- Distribution Build Project Assembler☆12Updated 6 years ago
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆205Updated last week
- PURL to CPE Relationship mapping project.☆96Updated this week
- The SCANOSS python package providing a simple, easy to consume library for interacting with SCANOSS APIs/Engine.☆35Updated last week
- Plain text version of the OSADL Open Source Policy Template: The Basis for License Compliance☆20Updated 3 years ago
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆215Updated 5 months ago
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆194Updated last week
- The model for the information captured in SPDX version 3 standard.☆95Updated last week
- SBOM Explorer - Discover and pull public SBOMs☆20Updated 5 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆88Updated 3 weeks ago
- A modern, cloud native SCAP scanner.☆20Updated 3 years ago
- Machine-readable specification for the attestation of security-relevant data.☆63Updated last month
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆64Updated last year
- Tutorials from TPM.dev members☆114Updated last month
- File Access Policy Daemon☆227Updated this week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆105Updated last week
- A place to systematically store software bill of materials (SBOM) documents.☆47Updated 2 years ago
- This project aims to standardize the representation and management of EOL and EOS product information across the industry.☆29Updated last year
- standard for Uptane☆40Updated last year
- TPM subsystem updates for Linux kernel source tree☆22Updated 7 years ago
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆33Updated 2 years ago
- OpenVEX Specification☆160Updated 4 months ago