purl · GitHub Topics

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java 3.1 k

1 天前

aboutcode-org / scancode-toolkit

🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nl...

license copyright packages 依赖管理 spdx provenance license-scan licensing spdx-licenses open-source-licensing license-checking software-composition-analysis purl package-url sbom sca cyclonedx dependency-graph

Python 2.3 k

2 天前

package-url / purl-spec

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

purl package-url package url cyclonedx 依赖管理 package-management sbom spdx

786

5 天前

CycloneDX / cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission t...

bom sca cyclonedx sbom Docker oci containers owasp package-url purl

JavaScript 708

3 天前

aboutcode-org / vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase...

Common Vulnerabilities and Exposures (CVE)安全 vulnerability-detection vulnerability vulnerability-databases vulnerability-scanners ossindex snyk nvd cvss package-url purl

Python 592

2 天前

CycloneDX / cyclonedx-cli

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

bom bill-of-materials purl package-url sbom cyclonedx spdx owasp sbom-generator vex Hacktoberfest

C# 368

7 个月前

CycloneDX / cyclonedx-maven-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

bom spdx Maven maven-plugin bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator vex

Java 324

1 个月前

CycloneDX / cyclonedx-python

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

Python pip bom sbom spdx bill-of-materials package-url purl cyclonedx owasp sbom-generator poetry conda requirements environment Hacktoberfest

Python 292

3 天前

CycloneDX / cyclonedx-dotnet

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

bom spdx .NET bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator Hacktoberfest vex

C# 217

4 天前

CycloneDX / cyclonedx-gradle-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

bom spdx Gradle gradle-plugin bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator

Java 190

4 天前

tiiuae / sbomnix

A suite of utilities to help with software supply chain challenges on nix targets

cyclonedx Nix sbom sbom-generator Python bill-of-materials 依赖管理 purl 安全 static-analysis vulnerability-scanners software-supply-chain software-supply-chain-security

Python 176

4 天前

aboutcode-org / scancode.io

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabas...

sca software-composition-analysis Open Source license Docker virtual-machine cyclonedx package-url purl spdx vulnerabilities

Python 136

2 天前

CycloneDX / cyclonedx-rust-cargo

Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

bom spdx Rust cargo cargo-plugin bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator vex

Rust 133

24 天前

AppThreat / vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers.

vulnerability-detection Common Vulnerabilities and Exposures (CVE)nvd 命令行界面 sca advisories 数据库 purl

Python 120

11 天前

CycloneDX / sbom-utility

Utility that provides an API platform for validating, querying and managing BOM data

sbom bom cyclonedx spdx vex bill-of-materials Hacktoberfest owasp package-url purl

Go 113

16 天前

CycloneDX / cyclonedx-core-java

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

bom spdx bill-of-materials package-url purl sbom cyclonedx owasp vex Library

Java 93

3 天前

CycloneDX / cyclonedx-python-lib

Python implementation of OWASP CycloneDX

Python owasp bom spdx bill-of-materials purl package-url sbom cyclonedx vex attestation Library Hacktoberfest

Python 83

6 天前

nikstur / bombon

Nix CycloneDX Software Bills of Materials (SBOMs)

cyclonedx Nix sbom bill-of-materials bom license sbom-generator components 依赖管理 purl spdx

Rust 81

14 天前

package-url / packageurl-python

Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors...

purl package-url Library Python Hacktoberfest

Python 74

9 天前

CycloneDX / cyclonedx-php-composer

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

bom spdx PHP composer-plugin bill-of-materials package-url purl sbom cyclonedx owasp sbom-generator Composer dependency-graph Hacktoberfest

PHP 65

14 天前