Top 6 saasbom Open-Source Projects

• cdxgen

  3 469 9.5 JavaScript

  Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962

  

Project mention: Show devsecops: OWASP dep-scan v5 - a next-generation security and risk audit tool for everyone | /r/devsecops | 2023-12-05

Today, it gives me great pleasure to announce OWASP dep-scan v5. Like everyone, I was constantly frustrated with the amount of false positives generated by all Software Composition Analysis tools (including mine) and wanted to do something. I worked closely with a few colleagues (Caroline, Tim, Saket, and David) for a year to build the various capabilities that together form depscan v5.

• cyclonedx-maven-plugin

  12 274 8.3 Java

  Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

  

Project mention: Best Practices for Adopting Open-Source Software in 2024 | dev.to | 2024-05-17

SPDX17 is an open standard developed by the Linux Foundation to communicate details of a SBOM, including components, licenses, copyrights, and security references, recognised internationally as ISO/IEC 5962:202118 (System Package Data Exchange (SPDX®) 2024). CycloneDX19, originating from the Open Web Application Security Project (OWASP) community, is an SBOM standard crafted for application security and supply chain component analysis, now extended to encompass a broader array of applications such as software-as-a-service BOM (SaaSBOM) (CycloneDX 2024).

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• bom-examples

  1 153 2.2

  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)

  

Project mention: Do You Need an SBOM? | dev.to | 2024-05-06

We won't dive deep, but here's a component listing for the @babel/polyfill NodeJS module from the ProtonMail web client's SBOM in CycloneDX's examples repository. It provides a variety of information about the component, including a published hash for that release that can be used to verify the authenticity of the component.

• cyclonedx-gomod

  4 126 8.7 Go

  Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

  

• cyclonedx-core-java

  1 69 7.9 Java

  CycloneDX SBOM Model and Utils for Creating and Validating BOMs

  

Project mention: Dependency inventory / dashboard for multiple maven projects | /r/java | 2023-06-08

• cyclonedx-bom-repo-server

  1 64 0.0 C#

  A BOM repository server for distributing CycloneDX BOMs

  

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com