Produce an Open Source Vulnerability JSON file based on information in an SPDX document
☆64May 27, 2024Updated 2 years ago
Alternatives and similar repositories for spdx-to-osv
Users that are interested in spdx-to-osv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Utility that converts SBOM documents from CycloneDX to SPDX☆34Jan 19, 2024Updated 2 years ago
- Tool to scan a container image's rootfs☆12Nov 6, 2023Updated 2 years ago
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆624Feb 10, 2026Updated 6 months ago
- This tool compares two Software Bill of Materials (SBOMs) and reports the differences.☆45Mar 9, 2026Updated 5 months ago
- A place to systematically store software bill of materials (SBOM) documents.☆51Jun 1, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A CLI tool for generating a Software Bill of Materials (SBOM) from Yocto Project.☆29Jul 1, 2026Updated last month
- Support CI generation of SBOMs via golang tooling.☆427Jan 13, 2025Updated last year
- Examples of SPDX files for software combinations☆150Jun 2, 2026Updated 2 months ago
- Using AI Agents for Audit SBOMs for OSS Compliance☆15Apr 7, 2025Updated last year
- Automating Compliance Tooling Project☆25Jan 28, 2022Updated 4 years ago
- Open Source Vulnerability schema.☆266Aug 6, 2026Updated last week
- Utility that provides an API and CLI to identify licenses and legal terms☆54Jul 11, 2025Updated last year
- Repository of SBOMs generated by the syft SBOM generator tool, against a list of popular dockerhub container images.☆21Mar 3, 2026Updated 5 months ago
- Access AKS clusters using Azure Workload Identity Federation☆10Feb 10, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A C/C++ dependency scanner☆40Nov 24, 2023Updated 2 years ago
- A utility to generate SPDX-compliant Bill of Materials manifests☆462Updated this week
- REUSE recommendations, tutorials, FAQ and specification☆19May 27, 2024Updated 2 years ago
- An SBOM query language and associated utilities☆55Jan 22, 2024Updated 2 years ago
- conftest plugin that transforms k8s input object to be compatible with gatekeeper policies☆14Jan 26, 2024Updated 2 years ago
- PURL to CPE Relationship mapping project.☆128Updated this week
- Global Security Database☆320Apr 29, 2024Updated 2 years ago
- GitHub Action to get a license overview in SPDX format☆14Dec 24, 2021Updated 4 years ago
- CERTITUDE - A python package to classify malicious URLs☆20May 16, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SPDX Merge tool☆51May 18, 2026Updated 3 months ago
- SBOM Explorer - Discover and pull public SBOMs☆21May 23, 2025Updated last year
- A tool to match license text with SPDX license list using a an algorithm with finds close matches. It follows SPDX Matching guidelines to…☆34Updated this week
- Training material examples, code snippets, manifests, etc.☆13Jun 20, 2017Updated 9 years ago
- A Python library to parse, validate and create SPDX documents.☆255Mar 13, 2026Updated 5 months ago
- krew-wasm offers a way to write and distribute kubectl plugins based on WebAssembly☆14Apr 15, 2024Updated 2 years ago
- Orthos is a machine administration tool.☆19Updated this week
- Kubernetes KMS implementation☆27Aug 10, 2026Updated last week
- Threat Hunting at Scale: Auditing Thousands of Clusters With Falco + Fluent☆11Aug 13, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ⚡ Guidance, samples, and tools for HPC workloads on AKS clusters with RDMA and InfiniBand support, including GPUDirect RDMA.☆23Updated this week
- vexctl is a tool to attest VEX impact statements☆45Mar 27, 2023Updated 3 years ago
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Apr 17, 2023Updated 3 years ago
- This repo contains license and copyright analysis results of open source packages. It further contains other license compliance relevant …☆54Updated this week
- Library to ingest and generate VEX documents☆20Mar 9, 2026Updated 5 months ago
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- Container Image Signing & Verifying on Ethereum [Testnet]☆17Mar 15, 2022Updated 4 years ago