bgnetworks / meta-dependencytrack
A Yocto meta-layer for generating CycloneDX SBOMs and automatically uploading them to Dependency Track.
☆21Updated 11 months ago
Alternatives and similar repositories for meta-dependencytrack
Users that are interested in meta-dependencytrack are comparing it to the libraries listed below
Sorting:
- Vulnerability management tool that provides Yocto SBOM generation and CVE Analysis of target images.☆37Updated 3 weeks ago
- The SCANOSS SBOM Workbench graphical user interface to scan and audit your source code.☆53Updated last week
- Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions☆47Updated last year
- apt2sbom python package generates SPDX or CycloneDX files from Ubuntu APT and Python packaging information☆22Updated 3 years ago
- PURL to CPE Relationship mapping project.☆89Updated this week
- Library to ingest and generate VEX documents☆15Updated 3 months ago
- A place to systematically store software bill of materials (SBOM) documents.☆46Updated last year
- This is a mapping of CPEs to package urls created by using VulnerableCode's data☆10Updated 4 years ago
- Check SPDX SBOM for NTIA minimum elements☆61Updated 2 weeks ago
- Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…☆73Updated last month
- Tool for creating, modifying and validating CycloneDX SBOMs.☆27Updated this week
- Utility that converts SBOM documents from CycloneDX to SPDX☆29Updated last year
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆65Updated last week
- SBOM Edit - Conditional edits and merging of SBOMs☆69Updated this week
- Service to scan licenses from source code☆12Updated last year
- SBOM Explorer - Discover and pull public SBOMs☆18Updated this week
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆59Updated last year
- Utility that provides an API platform for validating, querying and managing BOM data☆109Updated 3 weeks ago
- sbomify is an SBOM management platform.☆24Updated this week
- A standard API specification for exchanging supply chain artifacts and intelligence☆79Updated this week
- SBOM Assess - Evaluate SBOM quality and compliance☆208Updated this week
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆64Updated 11 months ago
- The SCANOSS python package providing a simple, easy to consume library for interacting with SCANOSS APIs/Engine.☆31Updated last week
- Utility that provides an API and CLI to identify licenses and legal terms☆44Updated 11 months ago
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆75Updated 2 weeks ago
- ☆47Updated last week
- CveXplore☆38Updated last month
- SBOM Vulnerability Scanning & Assessment tool☆18Updated last week
- Sharing software supply chain security open source projects☆49Updated 2 years ago
- Library to ingest and generate SBOMs☆25Updated 3 weeks ago