An Intro to SBOMs

• sbom-tool

  8 1,438 8.9 C#

  The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

  

I use them. With the Microsoft SBOM tool[0] I generate a SBOM (which is unfortunately missing license information) and then feed them to Google OSV scanner to check for vulnerabilities. Not unlike Github Advanced Security does.

[0]: https://github.com/microsoft/sbom-tool

• osv-scanner

  10 5,825 9.6 Go

  Vulnerability scanner written in Go which uses the data provided by https://osv.dev

  

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project