Repositories list

• syft

  Public
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems

  Go

  •

  Apache License 2.0

  •576•0•0•0•Updated Nov 8, 2024Nov 8, 2024

• grype

  Public
  A vulnerability scanner for container images and filesystems

  Go

  •

  Apache License 2.0

  •574•0•0•1•Updated Nov 7, 2024Nov 7, 2024

• fangs

  Public
  Go

  •

  Apache License 2.0

  •1•0•0•0•Updated Oct 14, 2024Oct 14, 2024

• syft-unknown-analyzer

  Public
  Go

  •0•0•0•0•Updated Oct 7, 2024Oct 7, 2024

• scan-action

  Public
  Anchore container analysis and scan provided as a GitHub Action

  JavaScript

  •

  MIT License

  •77•0•0•0•Updated Oct 4, 2024Oct 4, 2024

• scan-action-test

  Public
  JavaScript

  •0•0•0•1•Updated Oct 4, 2024Oct 4, 2024

• workflows-test

  Public
  0•0•1•1•Updated Sep 27, 2024Sep 27, 2024

• go-downstream-lib

  Public
  Go

  •0•0•0•0•Updated Sep 20, 2024Sep 20, 2024

• go-cache

  Public
  Go

  •

  Apache License 2.0

  •1•0•0•0•Updated Sep 19, 2024Sep 19, 2024

• tools-golang

  Public
  Collection of Go packages to work with SPDX files

  Go

  •

  Other

  •58•0•0•1•Updated Aug 29, 2024Aug 29, 2024

• sbom-action

  Public
  GitHub Action for creating software bill of materials using Syft.

  TypeScript

  •

  Apache License 2.0

  •30•0•0•1•Updated Aug 13, 2024Aug 13, 2024

• shacl2code

  Public
  Convert SHACL model to code bindings

  Python

  •

  MIT License

  •4•0•0•0•Updated Aug 4, 2024Aug 4, 2024

• go-bouncer

  Public
  Reports on the licenses used by a Go package and its dependencies.

  Go

  •

  Apache License 2.0

  •125•0•0•0•Updated Jul 24, 2024Jul 24, 2024

• sbom-action-test

  Public
  JavaScript

  •0•0•0•1•Updated Jul 19, 2024Jul 19, 2024

• stereoscope

  Public
  go library for processing container images and simulating a squash filesystem

  Go

  •

  Apache License 2.0

  •45•0•0•0•Updated Jul 8, 2024Jul 8, 2024

• binny

  Public
  Manage a directory of binaries without a package manager

  Go

  •

  Apache License 2.0

  •1•0•0•0•Updated Jun 6, 2024Jun 6, 2024

• advisory-database

  Public
  Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

  Creative Commons Attribution 4.0 International

  •334•0•0•0•Updated Apr 15, 2024Apr 15, 2024

• vulnerability-data-tools

  Public
  Python

  •

  Apache License 2.0

  •3•0•0•0•Updated Mar 27, 2024Mar 27, 2024

• nvd-data-overrides

  Public
  Creative Commons Zero v1.0 Universal

  •5•0•0•0•Updated Mar 22, 2024Mar 22, 2024

• grant

  Public
  Search an SBOM for licenses and the packages they belong to

  Go

  •

  Apache License 2.0

  •7•0•0•0•Updated Feb 28, 2024Feb 28, 2024

• quill

  Public
  Simple mac binary signing from any platform

  Go

  •

  Apache License 2.0

  •15•0•0•0•Updated Feb 23, 2024Feb 23, 2024

• test-sarif

  Public
  0•0•0•0•Updated Feb 17, 2024Feb 17, 2024

• permission-test-1234

  Public
  0•0•0•1•Updated Dec 22, 2023Dec 22, 2023

• homebrew-core

  Public
  🍻 Default formulae for the missing package manager for macOS (or Linux)

  Ruby

  •

  BSD 2-Clause "Simplified" License

  •12k•0•0•0•Updated Sep 21, 2023Sep 21, 2023

• go-logger

  Public
  Go

  •

  Apache License 2.0

  •2•0•0•0•Updated Jun 29, 2023Jun 29, 2023

• go-cli-tools

  Public
  Makefile

  •0•0•0•0•Updated May 10, 2023May 10, 2023

• spdx-spec

  Public
  The SPDX specification in MarkDown and HTML formats.

  HTML

  •

  Other

  •140•0•0•0•Updated Mar 14, 2023Mar 14, 2023

• packageurl-go

  Public
  Go implementation of the package url spec

  Go

  •

  MIT License

  •48•0•0•0•Updated Mar 3, 2023Mar 3, 2023

• go-progress

  Public
  simple progress utils

  Go

  •

  MIT License

  •3•0•0•0•Updated Mar 1, 2023Mar 1, 2023

• starter-workflows

  Public
  Accelerating new GitHub Actions workflows

  TypeScript

  •

  Other

  •5.4k•1•0•3•Updated Feb 20, 2023Feb 20, 2023