Browse & filter

Filter by platform, license text, maturity, maintenance cadence, and editorial tags like privacy-focused or self-hosted. Search matches names, summaries, tags, and use cases.

Syft

Also strong

CLI and library for generating SBOMs (SPDX, CycloneDX) from images, directories, and archives.

sbomsupply-chaincompliancecontainers

Security & Privacy

Dependency-Track

Also strong

Continuous SBOM analysis platform tracking component vulnerabilities, policies, and audit trails for supply chain risk.

sbomsupply-chainowaspvulnerabilityself-hosted