interlynk-io/sbomqs

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

A utility to generate SPDX-compliant Bill of Materials manifests

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

Detect license usage restrictions in your project!

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

Protect against malicious open source packages 🤖

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.