sonatype-nexus-community / chequeLinks
Audit C/C++ projects (make, cmake, command line, etc.)
☆27Updated 4 years ago
Alternatives and similar repositories for cheque
Users that are interested in cheque are comparing it to the libraries listed below
Sorting:
- Report missing advisories and corrections on OSS Index☆17Updated 2 years ago
- ahab is a tool to check for vulnerabilities in your apt, apk, or yum powered operating systems, powered by Sonatype OSS Index.☆68Updated last year
- Examples of SPDX files for software combinations☆139Updated 3 weeks ago
- A specification including, problem statement, use cases, requirements, and architectural constituents for a Transparency Service in suppo…☆14Updated 2 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆48Updated 2 years ago
- ☆15Updated this week
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆65Updated last year
- Build custom Docker seccomp profiles for containers by finding syscalls it uses.☆90Updated last month
- Tool for creating, modifying and validating CycloneDX SBOMs.☆28Updated this week
- A community collection of security reviews of open source software components.☆96Updated last year
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆65Updated last year
- Static code analysis of refpolicy style SELinux policy☆46Updated 8 months ago
- Library to ingest and generate SBOMs☆34Updated 3 weeks ago
- SCANOSS Open Source Inventory Engine☆40Updated this week
- ☆102Updated last year
- apt2sbom python package generates SPDX or CycloneDX files from Ubuntu APT and Python packaging information☆25Updated 3 years ago
- SBOM Search - Context aware search in SBOM repositories☆29Updated 2 weeks ago
- Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions☆51Updated last week
- PURL to CPE Relationship mapping project.☆102Updated this week
- A Python library to parse, validate and create SPDX documents.☆228Updated 5 months ago
- SARIF Microsoft Visual Studio Code extension☆125Updated 2 weeks ago
- Utility that provides an API and CLI to identify licenses and legal terms☆53Updated 5 months ago
- SPDX Tools☆143Updated 2 months ago
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆79Updated 2 weeks ago
- The SCANOSS python package providing a simple, easy to consume library for interacting with SCANOSS APIs/Engine.☆36Updated last week
- Manage collection of SBOMs (Software Bill of Materials)☆14Updated last year
- A Yocto meta-layer for generating CycloneDX SBOMs and automatically uploading them to Dependency Track.☆21Updated last year
- sbomasm: The Complete SBOM Management Toolkit☆94Updated last week
- Open Source Vulnerability schema.☆217Updated this week
- Service to scan licenses from source code☆12Updated 2 years ago