Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents
☆26Jan 19, 2025Updated last year
Alternatives and similar repositories for vexy
Users that are interested in vexy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Library to ingest and generate VEX documents☆21Mar 9, 2026Updated 7 months ago
- A taxonomy of all official CycloneDX property namespaces and names☆28Updated this week
- Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners☆14Oct 27, 2026Updated last week
- SBOM Search - Context aware search in SBOM repositories☆33Oct 5, 2026Updated last month
- Functionality and DataModels of OWASP CycloneDX for Python☆115Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Examples of using Snyk's SBOM APIs.☆15Sep 29, 2022Updated 4 years ago
- GitHub action to generate a CycloneDX SBOM for Go modules☆11Mar 21, 2024Updated 2 years ago
- Python implementation of Stakeholder-Specific Vulnerability Categorization (SSVC)☆23Updated this week
- Transform SBOM contents into a formatted document including markdown and PDF formats☆44Jan 26, 2026Updated 9 months ago
- Lockheed Martin developed utility to combine multiple CycloneDX SBOMs☆14Jan 16, 2023Updated 3 years ago
- Utility that provides an API and CLI to identify licenses and legal terms☆56Jul 11, 2025Updated last year
- ☆14Nov 13, 2023Updated 2 years ago
- GitHub action to generate a CycloneDX SBOM for .NET☆13Jul 15, 2025Updated last year
- Fork of the Dependency-Track API server. It includes various changes necessary to work with Hyades.☆24May 29, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Utility that provides an API platform for validating, querying and managing BOM data☆168Oct 30, 2026Updated last week
- sbomasm: The Complete SBOM Management Toolkit☆142Updated this week
- Library to ingest and generate SBOMs☆46Updated this week
- A standard API specification for exchanging supply chain artifacts and intelligence☆122Oct 21, 2026Updated 2 weeks ago
- A BOM repository server for distributing CycloneDX BOMs☆89Updated this week
- Static Analysis Results Interchange Format (SARIF) For OCaml☆14Apr 22, 2026Updated 6 months ago
- CISA Known Exploited Vulnerabilities Catalog Enrichment☆19Jun 24, 2024Updated 2 years ago
- CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.☆554Oct 19, 2026Updated 2 weeks ago
- Open Security Controls Assessment Language Toolbox☆19Apr 22, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions…☆50May 1, 2026Updated 6 months ago
- A documentation and tracking project with the goal of making package management systems more secure.☆52Mar 5, 2021Updated 5 years ago
- CaPyCLI - Python scripts for software license compliance automation with SW360☆21Updated this week
- A comprehensive guide to open source software supply chain security☆16Oct 13, 2026Updated 3 weeks ago
- Low-effort reachability analysis for third-party code vulnerabilities.☆23Jul 11, 2023Updated 3 years ago
- Proof of concept for OWASP Dependency-Track's own, centralized vulnerability database.☆12Apr 29, 2026Updated 6 months ago
- Go client library for OWASP Dependency-Track☆37Oct 14, 2026Updated 3 weeks ago
- Example of a plugin that can parse non-Fortify security scan results and import them into Fortify Software Security Center.☆12Mar 19, 2022Updated 4 years ago
- Secvisogram is a web tool for creating and editing security advisories in the CSAF 2.0 format☆46Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- This repository stores meetings minutes for the SPDX project☆43Updated this week
- PURL to CPE Relationship mapping project.☆132Updated this week
- Tool to guess CPE name based on common software name☆132Apr 15, 2026Updated 6 months ago
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- Measure release insights and recommendations for open-source dependencies. Note: this project is archived.☆10Jan 3, 2023Updated 3 years ago
- Virtual tunnel interface for the IEEE 802.15.4 serial protocol☆11May 29, 2013Updated 13 years ago
- Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.☆104May 29, 2026Updated 5 months ago