Example CLI project to demo API architecture and protobom library
☆26Oct 26, 2026Updated last week
Alternatives and similar repositories for sbom-convert
Users that are interested in sbom-convert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A universal SBOM representation in protocol buffers☆338Updated this week
- Automating Compliance Tooling Project☆25Jan 28, 2022Updated 4 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆51Jun 1, 2023Updated 3 years ago
- SBOM Move - Automate build and transfer of SBOMs across systems☆28Sep 7, 2026Updated last month
- This is the GitHub repo of the OpenChain SBOM Study Group☆15Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆87Oct 23, 2026Updated last week
- Lockheed Martin developed utility to combine multiple CycloneDX SBOMs☆14Jan 16, 2023Updated 3 years ago
- OSS License Simple Viewer is a simple Excel-based tool as OSS license reference for engineers.☆14Nov 20, 2020Updated 5 years ago
- Manage collection of SBOMs (Software Bill of Materials)☆14Mar 25, 2024Updated 2 years ago
- Reference GitHub Workflows for SBOM generation from the CISA SBOM Generation Reference Implementation Tiger Team☆34Feb 2, 2026Updated 9 months ago
- Black Duck I/O☆14Sep 2, 2026Updated last month
- Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.☆93Updated this week
- Vulnerability Management with SBOM☆19Sep 24, 2026Updated last month
- An SBOM query language and associated utilities☆55Jan 22, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- AlmaLinux OS SBOM data management utility.☆16Apr 2, 2026Updated 7 months ago
- Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts☆19Sep 11, 2026Updated last month
- Plugin for retrieving Dependencytrack metrics in Backstage☆20Sep 28, 2026Updated last month
- Privateer plugin for scanning the security hygiene of a GitHub repository.☆32Updated this week
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆316Updated this week
- Inspect Python code and PyPI package manifests. Resolve Python dependencies.☆23May 18, 2026Updated 5 months ago
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆34Apr 22, 2025Updated last year
- Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.☆45Oct 30, 2023Updated 3 years ago
- Rust implementation of ossf osv specification☆16Sep 22, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data☆20Jun 13, 2022Updated 4 years ago
- The team at Bosch were working on a mapping of SPDX and CycloneDX on both property level (= syntax) and a semantic interpretation of the …☆16Updated this week
- This repository is related to Choukanzu WG of the Japan OSS Promotion Forum.☆19Sep 5, 2026Updated last month
- ORBIT: Open Resources for Baselines, Interoperability, and Tooling☆31Sep 29, 2026Updated last month
- Evaluate source control (GitHub) security posture☆251Mar 8, 2023Updated 3 years ago
- ☆13Jun 1, 2021Updated 5 years ago
- Specification for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆27Nov 17, 2025Updated 11 months ago
- A CLI used to work with the Wolfi OSS project☆76Updated this week
- SPDX Merge tool☆53Sep 7, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The model for the information captured in SPDX version 3 standard.☆106Updated this week
- A standard API specification for exchanging supply chain artifacts and intelligence☆121Oct 21, 2026Updated last week
- GitHub action to produce a SBOM report from a given Black Duck project☆12Feb 5, 2026Updated 8 months ago
- Utility that provides an API platform for validating, querying and managing BOM data☆168Oct 12, 2026Updated 2 weeks ago
- dockerfile for creating pytorch envirionment☆10Feb 19, 2023Updated 3 years ago
- Model Signing Specification☆30Sep 18, 2026Updated last month
- NestJs module to easily implement event driven architecture using RxJs in any NestJs project