philips-software / blackduck-report-action
GitHub action to produce a SBOM report from a given Black Duck project
☆12Updated 11 months ago
Related projects ⓘ
Alternatives and complementary repositories for blackduck-report-action
- OSS License Open Data☆12Updated 5 years ago
- Curations and configuration files for the OSS Review Toolkit.☆16Updated this week
- Publications done by Double Open.☆16Updated 4 years ago
- A small application which needs a better name and collects oss-license metadata and combines it☆31Updated 2 weeks ago
- A desktop workbench for OSS Review Toolkit result files.☆25Updated this week
- OSADL license compatibility matrix as a CSV☆15Updated last week
- A scalable server implementation of the OSS Review Toolkit.☆19Updated this week
- Automating Compliance Tooling Project☆20Updated 2 years ago
- A light-weight app to audit and inventory large codebases for open source license compliance.☆60Updated this week
- A taxonomy of all official CycloneDX property namespaces and names☆14Updated 2 weeks ago
- A collection of scripts for license compliance scanning, mostly experimental☆22Updated 3 months ago
- free and open source software license compatibility tool.☆45Updated this week
- SW360 Antenna project☆22Updated 3 years ago
- License Identifier☆14Updated 3 years ago
- A java api and command line tool for scanning, reporting and fixing a git repository's InnerSource Readiness based on a supplied specific…☆20Updated last year
- The International FOSS Law Book, v.2 and onwards☆13Updated 2 years ago
- GitHub Action to get a license overview in SPDX format☆14Updated 2 years ago
- Generates SPDX bill-of-material files from a package input and license scan☆12Updated 6 months ago
- SPDX Merge tool☆39Updated 2 months ago
- A web based tool for working with CycloneDX BOMs☆30Updated 2 months ago
- This repo realizes the idea that OSS compliance activities will be less expensive by applying OSS principles☆83Updated 3 months ago
- REUSE recommendations, tutorials, FAQ and specification☆19Updated 5 months ago
- Automate open source license compliance and ensure software supply chain integrity☆25Updated this week
- Use ORT in your GitLab pipelines☆13Updated 4 months ago
- This repository stores meetings minutes for the SPDX project☆27Updated this week
- SPDX 2.0 document creation and storage☆15Updated last year
- Submit SBOMs to GitHub's dependency submission API☆12Updated last year
- The model for the information captured in SPDX version 3 standard.☆70Updated 2 weeks ago
- SPDX Command Line Tools using the Spdx-Java-Library☆61Updated last month
- Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents☆19Updated last year