Go sbom

Open-source Go projects categorized as sbom
Edit details
Topics: spdx Security cyclonedx Golang Kubernetes
The modern identity platform for B2B SaaS
The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
workos.com
Sponsored

Top 13 Go sbom Projects

  • syft

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

    • Project mention: An Overview of Kubernetes Security Projects at KubeCon Europe 2023 | dev.to | 2023-05-22

    Syft is a popular open source CLI tool created by Anchore for generating an SBOM from container images and filesystems. It’s designed to provide a catalog of dependencies for other tools to use as a data source. It supports many popular programming languages, package managers, and container image formats.

  • kubeclarity

    KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

    • Project mention: Building Secure Docker Images for Production - Best Practices | dev.to | 2023-06-30

    In the following steps, we use a local Kubernetes cluster (such as kind) to test the image. With the cluster up and running, let's install some tooling to help us with image scanning. In this case, we're using KubeClarity. Follow the installation instructions in the README to install it into your development cluster.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • zarf

    DevSecOps for Air Gap & Limited-Connection Systems. https://zarf.dev/

    • Project mention: Zarf: K8s in Airgapped Environments | news.ycombinator.com | 2024-01-11

  • bomber

    Scans Software Bill of Materials (SBOMs) for security vulnerabilities

  • xeol

    A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs

    • Project mention: xeol | /r/devopspro | 2023-07-09

  • chainloop

    Chainloop is an Open Source Metadata Vault for your Software Supply Chain metadata, SBOMs, VEX, SARIF files, QA reports, and more.

    • Project mention: Choosing the “old stuff” as plugin SDK for Go in 2023 | news.ycombinator.com | 2023-07-06

  • bom

    A utility to generate SPDX-compliant Bill of Materials manifests

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • sbom-operator

    Catalogue all images of a Kubernetes cluster to multiple targets with Syft

  • SBOM Quality Score

    SBOM quality score - Quality metrics for your sboms

  • cyclonedx-gomod

    Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

    • Project mention: An Overview of Kubernetes Security Projects at KubeCon Europe 2023 | dev.to | 2023-05-22

    CycloneDx-gomod

  • parlay

    Enrich SBOMs with data from third party services

    • Project mention: Parlay | /r/devopspro | 2023-06-12

  • vmclarity

    VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities

    • Project mention: An Overview of Kubernetes Security Projects at KubeCon Europe 2023 | dev.to | 2023-05-22

    VMClarity works similarly, but within the context of VMs used by cloud services to host containers and clusters. Compared to containers, VMs may be as (or even more) vulnerable to threats and they typically need complex tools for analysis. Following a similar pattern to KubeClarity, VMClarity supports aggregating multiple tools into one UI and CLI.

  • fatbom

    fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool's strength.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Go sbom related posts

Index

What are some of the best open-source sbom projects in Go? This list will help you:

Project Stars
1 syft 5,451
2 kubeclarity 1,257
3 zarf 1,165
4 bomber 453
5 xeol 318
6 chainloop 305
7 bom 294
8 sbom-operator 179
9 SBOM Quality Score 132
10 cyclonedx-gomod 124
11 parlay 93
12 vmclarity 86
13 fatbom 32

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com