Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

Functionality and DataModels of OWASP CycloneDX for Python

Semantic SBOM diff and TUI analysis tool. Compares CycloneDX/SPDX files to component changes, dependency shifts, license conflicts, and vulnerabilities.

A toolset for dealing with Cryptography Bill of Materials (CBOM)

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

A tool for detecting cryptographic assets in container images and directories, and generating CBOMs.

GitHub Action to generate Cryptography Bill of Materials (CBOM)

Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

Présentation sur la sécurisation de la chaîne d'approvisionnement logicielle via les Software Bill Of Materials

BF-CBOM: Your Best Friend for Generating, Understanding, and Comparing Cryptography Bills of Material (CBOMs)

CLI tool to scan filesystems, containers, and network ports for cryptographic assets and generate a CycloneDX CBOM.

Cryptographic Discovery Scanner - Find every cryptographic algorithm in your codebase and now your quantum risk - part of the QRAMM Toolkit by CSNP

TLS/SSL security analyzer for quantum readiness assessment and CNSA 2.0 compliance

A testbed for benchmarking Cryptographic Bills of Materials (CBOMs).

No description provided.

Cryptographic Dependency Scanner - Identify quantum-vulnerable cryptographic algorithms in your software dependencies. Part of the QRAMM Toolkit.

Open-source tools for post-quantum cryptography readiness assessment

A Java project with obsolete hashing methods - for testing code-analysis tools

Repository for uploading, retrieving, and searching Cryptographic Bills of Materials (CBOM) documents.

Runtime Cryptography Bill of Materials (CBOM) extraction via eBPF/bpftrace, generating CycloneDX 1.6 CBOMs and evaluation charts for OpenSSL-based apps.

Cryptographic asset discovery and PQC readiness scanner with CycloneDX CBOM output

Crypto Bill of Materials (CBOM) generator for Java projects using CodeQL. Automatically detect cryptographic operations, algorithms, and key usages.

Contains a tool (and test files) for creating a JSON Cryptographic-Bill-Of-Materials (CBOM) document. The tool is a prototype and is still under development. Currently able to create CBOM documents only from Javascript files that use the Node Crypto module.