Alternatives and similar repositories for detect

Users that are interested in detect are comparing it to the libraries listed below

• blackducksoftware / hub
  Black Duck Docker Orchestration Files/Documentation
  ☆129Updated 3 weeks ago
• blackducksoftware / hub-rest-api-python
  HUB REST API Python bindings
  ☆95Updated 2 months ago
• jeremylong / open-vulnerability-cli
  A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mi…
  ☆152Updated last week
• CycloneDX / cyclonedx-cli
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
  ☆416Updated last week
• blackducksoftware / blackduck-docker-inspector
  ☆21Updated 3 years ago
• aquasecurity / trivy-db
  ☆281Updated 3 weeks ago
• jenkinsci / dependency-track-plugin
  Main repository for the official Dependency-Track Jenkins plugin
  ☆50Updated last week
• CycloneDX / specification
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…
  ☆434Updated last week
• opensbom-generator / spdx-sbom-generator
  Support CI generation of SBOMs via golang tooling.
  ☆423Updated 9 months ago
• stevespringett / CPE-Parser
  A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIS…
  ☆53Updated last week
• CycloneDX / bom-examples
  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
  ☆205Updated this week
• DependencyTrack / frontend
  Frontend UI for Dependency-Track
  ☆131Updated last week
• awesomeSBOM / awesome-sbom
  A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles
  ☆543Updated 5 months ago
• spdx / spdx-examples
  Examples of SPDX files for software combinations
  ☆137Updated 4 months ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆150Updated 6 months ago
• ossf / s2c2f
  The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…
  ☆216Updated 5 months ago
• spdx / ntia-conformance-checker
  Check SPDX SBOM for NTIA minimum elements
  ☆73Updated 3 weeks ago
• microsoft / sarif-tutorials
  User-friendly documentation for the SARIF file format.
  ☆328Updated last year
• docker / sbom-cli-plugin
  Plugin for Docker CLI to support SBOM creation using Syft
  ☆157Updated last month
• scanoss / purl2cpe
  PURL to CPE Relationship mapping project.
  ☆97Updated this week
• jenkinsci / dependency-check-plugin
  Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
  ☆138Updated 3 weeks ago
• CycloneDX / cyclonedx-bom-repo-server
  A BOM repository server for distributing CycloneDX BOMs
  ☆82Updated 3 months ago
• aquasecurity / harbor-scanner-trivy
  Use Trivy as a plug-in vulnerability scanner in the Harbor registry
  ☆225Updated last year
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆212Updated this week
• OtherDevOpsGene / zap-sonar-plugin
  Integrates OWASP Zed Attack Proxy reports into SonarQube
  ☆72Updated 3 months ago
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆318Updated 3 months ago
• CycloneDX / cdxgen
  Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package manager…
  ☆803Updated last week
• stevespringett / vulndb-data-mirror
  A simple Java command-line utility to mirror the entire contents of VulnDB.
  ☆48Updated 3 months ago
• CycloneDX / cyclonedx-linux-generator
  Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions
  ☆48Updated 2 weeks ago
• spdx / cdx2spdx
  Utility that converts SBOM documents from CycloneDX to SPDX
  ☆34Updated last year