Central Cyclone is a centralized SBOM generation service built on cdxgen. It analyzes multiple repositories via a single JSON config, supports private repo cloning, and uploads results to DependencyTrack. It offers CLI commands for analysis, upload, and project sync, with Docker support.
Open source. Open possibilities.
Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.
A little curiosity. A world of open source.
THE FIRST COLLECTIONLintro is an MIT-licensed command-line tool that brings many linters, formatters, type checkers and security scanners together under one interface, with consistent reports, auto-fixing, Docker images and optional AI-assisted review using your own API key.
A CLI and website that catalogs which versions of open-source components ship with each macOS and Xcode release, scanning Apple's IPSW firmware and Xcode archives to extract version strings from system binaries, the dyld shared cache, and SDK headers.
Syft is a CLI tool and Go library for generating Software Bills of Materials (SBOM) from container images and filesystems, supporting multiple ecosystems and output formats.