Tags : Browse Projects

Select a tag to browse associated projects and drill deeper into the tag cloud.

SpdxTool

Analyzed about 12 hours ago

Dotnet tool for manipulating SPDX SBOM files

5.91K lines of code

0 current contributors

4 months since last commit

1 users on Open Hub

Very Low Activity

I Use This

Mostly written in C#

Tags SBOM SPDX

OWASP CycloneDX

Analyzed 11 months ago

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction.

2.78M lines of code

0 current contributors

11 months since last commit

0 users on Open Hub

Activity Not Available

I Use This

Mostly written in JavaScript

Licenses: No declared licenses

Tags AI-BOM appsec Attestations CBOM CMDB EO14028 HBOM license MBOM ML-BOM OWASP SaaSBOM 7 more...

OWASP Dependency-Track

Claimed by Open Web Application Securi... Analyzed about 6 hours ago

Dependency-Track is a continuous SBOM analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track support SBOM, SaaSBOM, HBOM, VDR, and VEX in the OWASP CycloneDX format.

412K lines of code

8 current contributors

1 day since last commit

0 users on Open Hub

Very High Activity

I Use This

Mostly written in Java

Licenses: gpl3_or_l...

Tags cicd CycloneDX devops devsecops EO14028 HBOM inventory SaaSBOM SBOM security securityscanner SPDX 3 more...

neuvector

N

Analyzed 1 day ago

NeuVector Full Lifecycle Container Security Platform delivers the only cloud-native security with uncompromising end-to-end protection from DevOps vulnerability protection to automated run-time security, and featuring a true Layer 7 container firewall.

-34 lines of code

0 current contributors

8 days since last commit

0 users on Open Hub

Moderate Activity

I Use This

Mostly written in Go

Licenses: apache_2

Tags SBOM vulnerability-management vulnerability-scanner waf web-application-firewall

sigstore

Analyzed about 17 hours ago

sign. verify. protect. Making sure your software is what it claims to be.

58.1K lines of code

0 current contributors

1 day since last commit

0 users on Open Hub

Very High Activity

I Use This

Mostly written in Go

Licenses: apache_2

Tags ci-cd code-signing container-images container-security cryptography devops digital-signatures integrity keyless-signing linux-foundation pkix SBOM 8 more...

rekor

Analyzed about 4 hours ago

Software Supply Chain Transparency Log

63.6K lines of code

0 current contributors

about 23 hours since last commit

0 users on Open Hub

High Activity

I Use This

Mostly written in Go

Licenses: apache_2

Tags artifact-tracking auditing blockchain blockchain-alternative cryptography distributed-systems immutable-ledger merkle-tree SBOM security signature signature-storage 6 more...

SpdxModel

Analyzed about 22 hours ago

SPDX Model Library

6.33K lines of code

0 current contributors

4 months since last commit

0 users on Open Hub

Very Low Activity

I Use This

Mostly written in C#

Tags dotnet library SBOM SPDX