cbom

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.

A toolset for dealing with Cryptography Bill of Materials (CBOM)

Functionality and DataModels of OWASP CycloneDX for Python

Post-quantum migration workbench: inventories cryptographic indicators in source/config files, assigns migration priorities, and emits a CryptoBOM. Analysis tooling only - not a cryptographic implementation.

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

sbomify is a product security artifact hub and a trust center.

FIPS 203 ML-KEM (CRYSTALS-Kyber) for Rust. Pure-Rust, no_std, ACVP 180/180, KyberSlash-clean, SLSA L3 + cosign-signed releases. Published on crates.io as kyberlib and kyberlib-wasm.

A tool for detecting cryptographic assets in container images and directories, and generating CBOMs.

Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

Cryptographic Discovery Scanner - Find every cryptographic algorithm in your codebase and know your quantum risk - part of the QRAMM Toolkit by CSNP

GitHub Action to generate Cryptography Bill of Materials (CBOM)

BF-CBOM: Your Best Friend for Generating, Understanding, and Comparing Cryptography Bills of Material (CBOMs)

Open-source post-quantum readiness tooling by quantakrypto

Open-source TLS & SSH post-quantum cryptography scanner that generates a Cryptographic Bill of Materials (CBOM) aligned to NIST IR 8547.

Présentation sur la sécurisation de la chaîne d'approvisionnement logicielle via les Software Bill Of Materials

TLS/SSL security analyzer for quantum readiness assessment and CNSA 2.0 compliance

Cryptographic asset discovery and PQC readiness scanner with CycloneDX CBOM output

Cryptographic Dependency Scanner - Identify quantum-vulnerable cryptographic algorithms in your software dependencies. Part of the QRAMM Toolkit.