#cyclonedx (20 Repositories)
Ranked open-source repositories tagged with #cyclonedx, scored by pull request acceptance likelihood and maintainer engagement velocity.
62.0%
20.6h
20 repositories tagged #cyclonedx
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
relizaio/rearm
ReARM - Release Governance Platform
interlynk-io/sbomqs
sbomqs: The Comprehensive SBOM Quality & Compliance Tool
CycloneDX/cyclonedx-gradle-plugin
Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects
Goldziher/ai-rulez
Complete AI development workflow for 19+ tools. Builtin rules, agents, and conventions out of the box. Generate native configs for Claude, Cursor, Copilot, Windsurf, Gemini, Codex and more.
CycloneDX/specification
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
interlynk-io/sbomasm
sbomasm: The Complete SBOM Management Toolkit
CycloneDX/transparency-exchange-api
A standard API specification for exchanging supply chain artifacts and intelligence
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
anchore/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
sbom-tool/sbom-tools
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
snyk/parlay
Enrich SBOMs with data from third party services
tiiuae/sbomnix
SBOM, provenance, dependency graph, and vulnerability tools for Nix.
nikstur/bombon
Nix CycloneDX Software Bills of Materials (SBOMs)
CycloneDX/cyclonedx-core-java
CycloneDX SBOM Model and Utils for Creating and Validating BOMs
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
CycloneDX/cyclonedx-cli
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
CycloneDX/cyclonedx-dotnet
Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects
Trusera/ai-bom
AI Bill of Materials — discover every AI agent, model, and API in your infrastructure