ossf / s2c2fLinks
The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously improve the S2C2F guide which outlines and defines how to securely consume Open Source Software (OSS) dependencies into the developer’s workflow.
☆223Updated 8 months ago
Alternatives and similar repositories for s2c2f
Users that are interested in s2c2f are comparing it to the libraries listed below
Sorting:
- Generate a score for your sbom to understand if it will actually be useful.☆237Updated last year
- OpenVEX Specification☆164Updated 2 weeks ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆97Updated this week
- Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …☆195Updated 2 weeks ago
- ☆254Updated this week
- Validate the SPDX SBOM against NTIA, CISA, and other minimum element requirements.☆78Updated this week
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆215Updated 3 months ago
- Enrich SBOMs with data from third party services☆214Updated this week
- A reading list for software supply-chain security.☆366Updated 3 years ago
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆110Updated last week
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆265Updated this week
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆209Updated 4 months ago
- A tool to create, transform and attest VEX metadata☆172Updated this week
- Utility that provides an API platform for validating, querying and managing BOM data☆126Updated 3 weeks ago
- ☆102Updated last year
- Format agnostic SBOM tooling☆131Updated 2 months ago
- ☆74Updated last month
- A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles☆563Updated 8 months ago
- A compilation of resources in the software supply chain security domain, with emphasis on open source☆342Updated 2 years ago
- in-toto Attestation Framework☆322Updated last week
- Machine-readable specification for the attestation of security-relevant data.☆71Updated 3 weeks ago
- sbomasm: The Complete SBOM Management Toolkit☆100Updated last week
- OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…☆472Updated last week
- Visualizer for GUAC☆29Updated this week
- Support CI generation of SBOMs via golang tooling.☆423Updated last year
- CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.☆448Updated last month
- A universal SBOM representation in protocol buffers☆315Updated last week
- Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD …☆186Updated this week
- Technical Advisory Council☆133Updated last week
- ☆140Updated this week