philips-software / spdx-builder
Generates SPDX bill-of-material files from a package input and license scan
☆12Updated 7 months ago
Related projects ⓘ
Alternatives and complementary repositories for spdx-builder
- GitHub Action to get a license overview in SPDX format☆14Updated 2 years ago
- A java api and command line tool for scanning, reporting and fixing a git repository's InnerSource Readiness based on a supplied specific…☆20Updated last year
- A web based tool for working with CycloneDX BOMs☆30Updated 3 months ago
- Submit SBOMs to GitHub's dependency submission API☆12Updated last year
- GitHub action to produce a SBOM report from a given Black Duck project☆12Updated 11 months ago
- Run ORT in your GitHub action workflow to do licensing, security and best practices checks and generate reports/SBOMs☆24Updated 5 months ago
- Automating Compliance Tooling Project☆20Updated 2 years ago
- TUF repository for Sigstore trust root☆88Updated this week
- A tool that takes two or more micro SBOMs and composes them into one distributable SBOM☆23Updated last year
- SPDX Merge tool☆39Updated 2 months ago
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Updated last week
- A BOM repository server for distributing CycloneDX BOMs☆74Updated 8 months ago
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆60Updated 5 months ago
- Search Rekor for entries☆27Updated 4 months ago
- OSPO Landscape☆33Updated last week
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆32Updated 4 months ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆68Updated 2 months ago
- SPDX SBOM Landscape☆15Updated last year
- Umbrella Repository Service for TUF☆41Updated this week
- ☆61Updated 4 months ago
- A CLI tool for creating secure by design/default source repos.☆24Updated 3 months ago
- The model for the information captured in SPDX version 3 standard.☆71Updated this week
- A light-weight app to audit and inventory large codebases for open source license compliance.☆60Updated this week
- container-inspector is a suite of analysis utilities and command line tools for Docker container images, their layers and how these relat…☆34Updated 3 months ago
- bomsh is collection of tools to explore the OmniBOR idea☆21Updated 3 weeks ago
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆32Updated last year
- Curations and configuration files for the OSS Review Toolkit.☆16Updated this week
- Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.☆12Updated this week
- OPENSSF SECURITY INSIGHTS: Repository for development of the draft standard, where requests for modification should be made via Github Is…☆50Updated 2 months ago
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆30Updated 10 months ago