scanoss / engineLinks
SCANOSS Open Source Inventory Engine
☆41Updated last week
Alternatives and similar repositories for engine
Users that are interested in engine are comparing it to the libraries listed below
Sorting:
- The SCANOSS SBOM Workbench graphical user interface to scan and audit your source code.☆59Updated this week
- The SCANOSS python package providing a simple, easy to consume library for interacting with SCANOSS APIs/Engine.☆38Updated this week
- SCANOSS Mining tool☆25Updated last week
- This tool compares two Software Bill of Materials (SBOMs) and reports the differences.☆40Updated last year
- A light-weight app to audit and inventory large codebases for open source license compliance.☆72Updated this week
- PURL to CPE Relationship mapping project.☆106Updated this week
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆66Updated last year
- The model for the information captured in SPDX version 3 standard.☆97Updated this week
- Utility that converts SBOM documents from CycloneDX to SPDX☆33Updated 2 years ago
- List of SBOM Generation Tools☆29Updated 10 months ago
- OSS License Open Data☆12Updated 6 years ago
- sbomasm: The Complete SBOM Management Toolkit☆100Updated last week
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆65Updated last year
- Library to ingest and generate SBOMs☆36Updated last month
- A Python library to parse, validate and create SPDX documents.☆231Updated last week
- A place to systematically store software bill of materials (SBOM) documents.☆50Updated 2 years ago
- Audit C/C++ projects (make, cmake, command line, etc.)☆27Updated 4 years ago
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆111Updated 2 weeks ago
- Validate the SPDX SBOM against NTIA, CISA, and other minimum element requirements.☆76Updated last week
- Publications done by Double Open.☆16Updated 5 years ago
- SARIF Microsoft Visual Studio Code extension☆131Updated this week
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆79Updated last week
- Examples of SPDX files for software combinations☆140Updated 2 months ago
- SPDX 2.0 document creation and storage☆16Updated 3 years ago
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆109Updated this week
- Service to scan licenses from source code☆12Updated 2 years ago
- Utility that provides an API platform for validating, querying and managing BOM data☆124Updated 2 weeks ago
- OpenStaticAnalyzer is a source code analyzer tool, which can perform deep static analysis of the source code of complex systems.☆48Updated 3 years ago
- Open Source License Compliance Checklists☆11Updated last year
- OpenSSF Endusers Working Group☆28Updated last year