Explore Projects

Discover 8 open source projects

Active filters (1):
Search: spdxร—
Clear all

Showing 1-8 of 8 projects

anchore/syft

A CLI tool and library for generating SBOMs (Software Bill of Materials) from container images and filesystems.

8.4K
Active
Go
CLI Tools
Containerization
Go
#containers#sbom#oci

aboutcode-org/scancode-toolkit

Detects licenses, copyrights, and dependencies in code to help developers discover open-source packages.

2.5K
Active
Python
Python
#authentication#licensing#dependency-graph

microsoft/sbom-tool

A highly scalable and enterprise-ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

2.0K
Active
C#
CLI Tools
API Frameworks
C#
#sbom#sbom-generator#spdx

oss-review-toolkit/ort

A suite of tools to automate software compliance checks for open-source projects.

2.0K
Active
Kotlin
CLI Tools
Documentation
Kotlin
#compliance#copyright#license-management

guacsec/guac

GUAC aggregates software security metadata into a high fidelity graph database.

1.4K
Active
Go
Security Research
CLI Tools
Go
#software-supply-chain-security#vulnerability-management#sbom

composer/spdx-licenses

Tools for working with the SPDX license list and validating licenses.

1.4K
Stable
PHP
CLI Tools
Authentication
#licenses#spdx#validation

XmirrorSecurity/OpenSCA-cli

An open-source software supply chain security solution for detecting dependencies, vulnerabilities, and license compliance.

1.1K
Active
Go
Security Research
API Frameworks
#software-supply-chain-security#software-composition-analysis#vulnerability-detection

tern-tools/tern

Tern is a software composition analysis tool that generates a Software Bill of Materials for container images and Dockerfiles.

1.0K
Archived
Python
CLI Tools
Containerization
#compliance#containers#dependencies

Stay in the loop

Get weekly updates on trending AI coding tools and projects.