G-Rath / G-Rath/osv-detector

Provide support for CycloneDX SBOM

Open
#139 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
63
Forks
9
PR merge metrics
No merged PRs in 30d

Description

OWASP CycloneDX is a lightweight Software Bill of Materials (SBOM) standard designed to use in the application security contexts and supply chain component analysis. CycloneDX is an OWASP flagship project ( [owasp.org/www-project-cyclonedx](https://owasp.org/www-project-cyclonedx) ). The Open Web Application Security Project is a non-profit foundation that works to improve the security of software.

CycloneDX is already supported by many security vendors and projects ( [cyclonedx.org/about/supporters](https://cyclonedx.org/about/supporters) ). It is also recommended in the Technology Radar Volume 26 ( [thoughtworks.com/radar/platforms?blipid=202203034](https://www.thoughtworks.com/radar/platforms?blipid=202203034) )

Related links:

https://github.com/CycloneDX/cyclonedx-go

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.