Sbom Tool Collection

◆

◆

◆

◆

⚡Electric

★★

“scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.”

◆

◆

◆

◆

🔮Psychic

★★

“The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.”

◆

◆

◆

◆

🔮Psychic

★★

“Panthera(P.)uncia - Official CLI utility for Osprey Vision, Subdomain Center & Exploit Observer. ”

◆

◆

◆

◆

🔮Psychic

★

“A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.”

◆

◆

◆

◆

🔮Psychic

★

“CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments”

◆

◆

◆

◆

🌊Water

★

“sbomqs: The Comprehensive SBOM Quality & Compliance Tool”

◆

◆

◆

◆

🔮Psychic

★

“SBOM, provenance, dependency graph, and vulnerability tools for Nix.”

◆

◆

◆

◆

⚙️Steel

★

“Semantic SBOM/CBOM diff, quality scoring, and TUI analysis tool for CycloneDX/SPDX — covering component changes, dependency shifts, license conflicts, vulnerabilities, cryptographic inventory grading, and PQC compliance (CNSA 2.0, NIST IR 8547).”

◆

◆

◆

◆

🌊Water

★

“Enrich SBOMs with data from third party services”

◆

◆

◆

◆

📦Normal

★

“creates CycloneDX Software-Bill-of-Materials (SBOM) from Node.js-based projects”

◆

◆

◆

◆

⚡Electric

★

“Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects. ”

◆

◆

◆

◆

🌊Water

★

“Utility that provides an API platform for validating, querying and managing BOM data”

◆

◆

◆

◆

🔮Psychic

★

“Deptective automatically determines the native dependencies required to run any arbitrary program or command.”

◆

◆

◆

◆

⚡Thunder

★

“ReARM - Release Governance Platform”

◆

◆

◆

◆

🌊Water

★

“sbomasm: The Complete SBOM Management Toolkit”

◆

◆

◆

◆

⚡Thunder

★

“A toolset for dealing with Cryptography Bill of Materials (CBOM)”

◆

◆

◆

◆

🔮Psychic

★

“Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.”

◆

◆

◆

◆

☠️Poison

★

“Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects”