Alternatives and similar repositories for container-inspector:

Users that are interested in container-inspector are comparing it to the libraries listed below

• aboutcode-org / python-inspector
  Inspect Python code and PyPI package manifests. Resolve Python dependencies.
  ☆22Updated 2 weeks ago
• aboutcode-org / aboutcode-toolkit
  AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your…
  ☆96Updated 3 weeks ago
• ossf / sbom-everywhere
  Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
  ☆88Updated last week
• aboutcode-org / dejacode
  Automate open source license compliance and ensure software supply chain integrity
  ☆31Updated this week
• philips-software / spdx-action
  GitHub Action to get a license overview in SPDX format
  ☆14Updated 3 years ago
• QMSTR / qmstr
  QMSTR compliance tool
  ☆32Updated 2 years ago
• aboutcode-org / license-expression
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX …
  ☆65Updated 3 weeks ago
• SBOMit / specification
  ☆62Updated 9 months ago
• ossf / security-insights-spec
  Machine-readable specification for the attestation of security-relevant data.
  ☆59Updated last week
• opossum-tool / OpossumUI
  A light-weight app to audit and inventory large codebases for open source license compliance.
  ☆65Updated this week
• aboutcode-org / purldb
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulner…
  ☆45Updated last week
• act-project / TAC
  Automating Compliance Tooling Project
  ☆21Updated 3 years ago
• interlynk-io / sbomex
  Find & pull public SBOMs
  ☆18Updated 7 months ago
• vmware-samples / sbom-composer
  A tool that takes two or more micro SBOMs and composes them into one distributable SBOM
  ☆23Updated 2 years ago
• omnibor / bomsh
  bomsh is collection of tools to explore the OmniBOR idea
  ☆21Updated 5 months ago
• popey / sbommage
  Sbommage is an interactive terminal frontend for viewing Software Bill of Materials (SBOM) files in various formats.
  ☆26Updated 2 months ago
• todogroup / ospolandscape
  OSPO Landscape
  ☆36Updated this week
• philips-software / license-scanner
  Service to scan licenses from source code
  ☆12Updated last year
• chaoss / prospector
  Prospector permits automated collection of a wide range of metrics of open source projects useful in evaluating the project.
  ☆66Updated 6 years ago
• philips-software / SPDXMerge
  SPDX Merge tool
  ☆43Updated this week
• aboutcode-org / univers
  Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs…
  ☆35Updated 6 months ago
• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated 2 months ago
• chainguard-dev / darkfiles
  Darkfiles finds orphaned files in container images and makes them to bad deeds
  ☆41Updated last year
• anthonyharrison / sbomaudit
  Report on quality of SBOM contents
  ☆17Updated 4 months ago
• hermetoproject / hermeto
  Hermeto is a CLI tool that pre-fetches your project's dependencies to aid in making your build process network-isolated.
  ☆13Updated this week
• spdx / cdx2spdx
  Utility that converts SBOM documents from CycloneDX to SPDX
  ☆28Updated last year
• DoSOCSv2 / DoSOCSv2
  SPDX 2.0 document creation and storage
  ☆16Updated 2 years ago
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆31Updated last year
• spdx / tools
  SPDX Tools
  ☆136Updated last year
• clearlydefined / clearlydefined
  Doc, wiki and organizational content for ClearlyDefined
  ☆94Updated 2 weeks ago