Use SBOM metadata to validate release integrity.
-
Updated
Aug 12, 2023 - Python
#
spdx-sbom
Here are 25 public repositories matching this topic...
Detect Licenses, dependencies by scanning your project/repositories to discover the Open Source and Third party packages used in your code.
classifier open-source security security-audit packages open-source-licensing dependency-graph dependencies third-party license spdx spdx-license license-management sca spdx-licenses security-tools license-scan cyclonedx spdx-sbom software-component-analysis
-
Updated
Aug 21, 2024 - Java
📓 A python CLI tool to extract a software bill of materials and license info from a vcpkg manifest.
cpp vcpkg developer-tools spdx spdx-license spdx-licenses software-bill-of-materials sbom developer-tool spdx-license-identifier spdx-sbom sbom-tool software-bill-of-material spdx-23
-
Updated
Oct 15, 2024 - Python
Copyright and License management solutions
-
Updated
Nov 20, 2025 - TypeScript
AI BOM example. A simple sentiment analysis application, published solely as an artifact for the purpose of demonstrating a software bill of materials. Not recommended for any serious text classification task.
-
Updated
Sep 15, 2025 - Python
Utility that provides an API platform for validating, querying and managing BOM data
owasp bom vex vdr spdx spdx-license hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom spdx-sbom sbom-tool sbom-quality
-
Updated
Sep 24, 2025 - Go
Heimdall is a C++ toolchain for generating Software Bills of Materials (SBOMs) from compiled binaries, extracting debug information, symbols, and dependencies with plugin support for the LLVM and gold linker. Supports gcc and clang. A CMake module is provided for easy build integration and an SPDX/CycloneDX SBOM validator for BOM validation
spdx sca software-composition-analysis scrm sbom cyclonedx sbom-generator spdx-sbom c-scrm sbom-tool cyclonedx-sbom sbom-validation
-
Updated
Oct 30, 2025 - C++
Command line tool and python package for interacting with Timesys Vigiles APIs
-
Updated
Oct 31, 2025 - Python
A lightweight Go library for validating Software Bill of Materials (SBOM) against industry-standard specifications
golang supply-chain bom vex spdx bill-of-materials software-bill-of-materials go-module sbom cyclonedx supply-chain-security spdx-sbom sbom-tool cyclonedx-sbom sbom-tools
-
Updated
Dec 16, 2025 - Go
Python demo of generating an SPDX SBOM of RPM Packages
-
Updated
Nov 10, 2025 - Python
A suite of utilities to help with software supply chain challenges on nix targets
python security nix static-analysis dependencies cpe software-supply-chain vulnerability-scanners bill-of-materials software-bill-of-materials purl sbom cyclonedx sbom-generator software-supply-chain-security spdx-sbom sbom-tool
-
Updated
Nov 12, 2025 - Python
OSPAC - Open Source Policy as Code
open-source supply-chain policy software license spdx-licenses license-checking spdx-license-identifier spdx-sbom
-
Updated
Nov 25, 2025 - Python
Vulnerability management tool that provides Buildroot SBOM generation and CVE Analysis of target images.
buildroot cve cve-scanning linux-security buildroot-cve buildroot-cve-analysis buildroot-security buildroot-sbom spdx-sbom
-
Updated
Nov 25, 2025 - Python
Software Quality Management Tool
testing quality-assurance spdx software-testing requirements-management traceability safety-critical softwarequality functional-safety testcases spdx-sbom testspec
-
Updated
Dec 9, 2025 - Python
A library and CLI to work with CSAF and SBOM data
-
Updated
Dec 1, 2025 - JavaScript
Vulnerability management tool that provides OpenWRT SBOM generation and CVE Analysis of target images.
-
Updated
Dec 2, 2025 - Python
Improve this page
Add a description, image, and links to the spdx-sbom topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the spdx-sbom topic, visit your repo's landing page and select "manage topics."