Advanced SBOM visualization tool. Provides graphical information about the dependency stack of your application, list of vulnerabilities and overall application health. Supports multiple methods of data aggregation and filtering in a convenient, modern interface.
Malicious-PAckageFinder (m-paf) is a command-line tool that detects malicious and risky packages in your software supply chain using SBOM files.
Offline Package URL validator using a prebuilt FST of known packages.
ex-sbom, abbreviation for Explorer of SBOM, is currently an experimental visualization tool for SBOM analysis. In there's any question, kindly contact doryhuang@nics.nat.gov.tw for further assistance. 有任何相關問題，歡迎來電至 國家資通安全研究院前瞻中心架構設計組 詢問!
A lightweight Go library for validating Software Bill of Materials (SBOM) against industry-standard specifications
CLI to interact with ReARM SBOM / xBOM and Release Manager
SBOM Explorer - Discover and pull public SBOMs
SBOM Move - Automate build and transfer of SBOMs across systems
SBOM Search - Context aware search in SBOM repositories
Utility that provides an API platform for validating, querying and managing BOM data
sbomqs: The Comprehensive SBOM Quality & Compliance Tool
Add a description, image, and links to the sbom-tool topic page so that developers can more easily learn about it.
To associate your repository with the sbom-tool topic, visit your repo's landing page and select "manage topics."