sbom-generator

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

A suite of tools to automate software compliance checks.

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

SBOM, provenance, dependency graph, and vulnerability tools for Nix.

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

Malicious package & supply-chain intelligence

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects

Nix CycloneDX Software Bills of Materials (SBOMs)

sbomasm: The Complete SBOM Management Toolkit

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects