Skip to content
#

software-composition-analysis

Star

Here are 14 public repositories matching this topic...

Language: Python
Filter by language
All 14 Python 14 Java 7 Go 6 TypeScript 4 C# 2 JavaScript 2 Shell 2 C 1 Scala 1
Sort: Least recently updated
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

jonrau1 / CodeArtifactVulnScanner

Star 6

AWS native Static Application Security Testing (SAST) utility to find and eradicate vulnerable software packages stored in AWS CodeArtifact. Built for both real-time distributed and centralized deployments.

python aws-lambda serverless realtime appsec aws-security python-security continuous-security devsecops software-composition-analysis cloud-security sast security-hub static-application-security-testing
  • Updated Jan 20, 2021
  • Python

tern-tools / tern

Star 943

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

python docker open-source tool containers compliance dependencies spdx metadata-extraction risk-management software-composition-analysis oss-compliance sbom supply-chain-security
  • Updated Mar 12, 2024
  • Python

nexB / scancode-toolkit

Sponsor
Star 2k

🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

licensing packages open-source-licensing dependency-graph provenance dependencies license spdx copyright sca spdx-licenses license-checking license-scan copyright-scan software-composition-analysis oss-compliance purl package-url sbom cyclonedx
  • Updated Jun 13, 2024
  • Python

nexB / scancode.io

Sponsor
Star 94

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

docker open-source virtual-machine vulnerabilities license spdx sca scancode software-composition-analysis purl package-url cyclonedx foss-compliance
  • Updated Jun 13, 2024
  • Python

Improve this page

Add a description, image, and links to the software-composition-analysis topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the software-composition-analysis topic, visit your repo's landing page and select "manage topics."

Learn more