cbom

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.

A toolset for dealing with Cryptography Bill of Materials (CBOM)

Functionality and DataModels of OWASP CycloneDX for Python

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

Post-quantum migration workbench: inventories cryptographic indicators in source/config files, assigns migration priorities, and emits a CryptoBOM. Analysis tooling only - not a cryptographic implementation.

sbomify is a product security artifact hub and a trust center.

A tool for detecting cryptographic assets in container images and directories, and generating CBOMs.

FIPS 203 ML-KEM (CRYSTALS-Kyber) for Rust. Pure-Rust, no_std, ACVP 180/180, KyberSlash-clean, SLSA L3 + cosign-signed releases. Published on crates.io as kyberlib and kyberlib-wasm.

Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

Cryptographic Discovery Scanner - Find every cryptographic algorithm in your codebase and know your quantum risk - part of the QRAMM Toolkit by CSNP

GitHub Action to generate Cryptography Bill of Materials (CBOM)

BF-CBOM: Your Best Friend for Generating, Understanding, and Comparing Cryptography Bills of Material (CBOMs)

Open-source post-quantum readiness tooling by quantakrypto

Open-source TLS & SSH post-quantum cryptography scanner that generates a Cryptographic Bill of Materials (CBOM) aligned to NIST IR 8547.

Post-quantum cryptography toolkit for TypeScript and Node.js: ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205) and HPKE, plus AES-GCM, XChaCha20-Poly1305, Ed25519 and Argon2id. 18 packages: library, CLI, Fastify REST server, SDK, KMS, Prisma and TypeORM field encryption, React and Vue hooks, and a CBOM generator.

Cryptographic asset discovery and PQC readiness scanner with CycloneDX CBOM output

TLS/SSL security analyzer for quantum readiness assessment and CNSA 2.0 compliance

Présentation sur la sécurisation de la chaîne d'approvisionnement logicielle via les Software Bill Of Materials