Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

Python implementation of OWASP CycloneDX

A toolset for dealing with Cryptography Bill of Materials (CBOM)

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

A tool for detecting cryptographic assets in container images and directories, and generating CBOMs.

Présentation sur la sécurisation de la chaîne d'approvisionnement logicielle via les Software Bill Of Materials

Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

GitHub Action to generate Cryptography Bill of Materials (CBOM)

A testbed for benchmarking Cryptographic Bills of Materials (CBOMs).

A Java project with obsolete hashing methods - for testing code-analysis tools

Contains a tool (and test files) for creating a JSON Cryptographic-Bill-Of-Materials (CBOM) document. The tool is a prototype and is still under development. Currently able to create CBOM documents only from Javascript files that use the Node Crypto module.

Crypto Bill of Materials (CBOM) generator for Java projects using CodeQL. Automatically detect cryptographic operations, algorithms, and key usages.