spdx / spdx-maven-plugin
Plugin for supporting SPDX in a Maven build.
☆51Updated 2 weeks ago
Alternatives and similar repositories for spdx-maven-plugin:
Users that are interested in spdx-maven-plugin are comparing it to the libraries listed below
- SPDX Command Line Tools using the Spdx-Java-Library☆66Updated 2 weeks ago
- Java library which implements the Java object model for SPDX and provides useful helper functions☆40Updated last week
- CycloneDX SBOM Model and Utils for Creating and Validating BOMs☆86Updated this week
- An opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies☆62Updated this week
- sigstore maven plugin☆18Updated 6 months ago
- Utility that converts SBOM documents from CycloneDX to SPDX☆29Updated last year
- java clients for sigstore☆50Updated this week
- Java/JVM implementation of the package url spec☆25Updated 8 months ago
- Apache Maven Fluido Skin☆16Updated last month
- ☆113Updated 8 months ago
- Reproducible Central: rebuild instructions for artifacts published to (Maven) Central Repository☆108Updated this week
- The SonarQube plugin for jQAssistant☆12Updated last week
- Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects☆307Updated last week
- Zanzibar style fine grained authorization☆18Updated this week
- Check SPDX SBOM for NTIA minimum elements☆59Updated last week
- Extract license information from content.☆48Updated last week
- The ultimate Java library for Troy Hunt's ';-- Have I Been Pwned (v3).☆14Updated last year
- SPDX Tools☆133Updated last year
- Apache Maven Toolchains Plugin☆19Updated this week
- Sonatype OSS Index - Maven Integrations☆11Updated 2 years ago
- List of SBOM Generation Tools☆20Updated 2 months ago
- Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.☆66Updated this week
- We have moved and *archived* this repository. Pls. continue at the new place at https://github.com/eclipse/sw360 ... A software component…☆35Updated 6 years ago
- Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable …☆68Updated last month
- A Cloud Native Buildpack that builds Maven-based applications from source☆32Updated this week
- Main repository for the official Dependency-Track Jenkins plugin☆47Updated this week
- SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.☆62Updated this week
- OpenSSF Endusers Working Group☆28Updated 10 months ago
- A light-weight app to audit and inventory large codebases for open source license compliance.☆61Updated this week
- A Maven plugin that creates merge requests for dependency updates.☆27Updated 4 months ago