sbomify/sbomify

sbomasm: The Complete SBOM Management Toolkit

ReARM - Release Governance Platform

sbomqs: The Comprehensive SBOM Quality & Compliance Tool

DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

A tool to generate SBOM (Software Bill of Material) from source code artifacts.

Utility that provides an API platform for validating, querying and managing BOM data

GitHub Action for creating software bill of materials using Syft.

Vulnerability correlation engine that works at scale turning your data (SBOMs, CVE, advisories) into evidence from which to assert vulnerability correlations. Links vulnerability ↔ component ↔ product ↔ VEX across CSAF/VEX, OSV and CVE, and answers affectedness questions via REST API.