Repositories list

• shiftleftcyber.github.io

  Public
  CSS

  •00 forks•11 star•00 issues•11 pull request•Updated Apr 24, 2026Apr 24, 2026

• securesbom-sdk-golang

  Public
  golang implementation of the SecureSBOM SDK

  Go

  •

  Apache License 2.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• securesbom-verifier

  Public
  Verification library and offline CLI for signed SBOMs and digest signatures.

  Go

  •

  MIT License

  •00 forks•11 star•00 issues•11 pull request•Updated Apr 23, 2026Apr 23, 2026

• secure-sbom-action

  Public
  GitHub Action for SecureSBOM

  supply-chainbomvex+ 5

  supply-chainbomvexspdxbill-of-materialssoftware-bill-of-materialssbomcyclonedx

  Go

  •

  Apache License 2.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• sbom-validator

  Public
  A lightweight Go library for validating Software Bill of Materials (SBOM) against industry-standard specifications

  golangsupply-chainbom+ 12

  golangsupply-chainbomvexspdxbill-of-materialssoftware-bill-of-materialsgo-modulesbomcyclonedx+ 5

  Go

  •

  MIT License

  •00 forks•88 stars•00 issues•00 pull requests•Updated Apr 21, 2026Apr 21, 2026

• sbom-signing-best-practices

  Public
  A multi-language reference implementation for computing canonical SBOM hashes. Supports CycloneDX v1.7 & SPDX v2.2, v3.0 (JSON) to demonstrate cross-language in…

  javascriptpythonjava+ 15

  javascriptpythonjavagorustjsonsignatureverificationhashjsf+ 8

  Java

  •

  Apache License 2.0

  •00 forks•55 stars•00 issues•11 pull request•Updated Apr 14, 2026Apr 14, 2026

• securesbom-demo

  Public
  A collection of workflows showcasing SecureSBOM

  Java

  •

  Apache License 2.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Mar 30, 2026Mar 30, 2026

• ShiftSBOMGen

  Public
  A pure client side Software Bill of Materials (SBOM) generator for various project types. Supports CycloneDX & SPDX.

  ossbitbucketcicd+ 7

  ossbitbucketcicdspdxsbomcyclonedxsupply-chain-securitysbom-generatorbitbucket-pipesopen-source-se

  Makefile

  •

  MIT License

  •22 forks•33 stars•00 issues•00 pull requests•Updated Mar 20, 2026Mar 20, 2026

• tool-center

  Public
  Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •4646 forks•00 stars•00 issues•00 pull requests•Updated Jan 5, 2026Jan 5, 2026

• sbomasm

  Public
  sbomasm: The Complete SBOM Management Toolkit

  Go

  •

  Apache License 2.0

  •1313 forks•00 stars•00 issues•00 pull requests•Updated Dec 31, 2025Dec 31, 2025

• sbom-everywhere

  Public
  Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption

  Vue

  •

  Apache License 2.0

  •4141 forks•00 stars•00 issues•00 pull requests•Updated Sep 16, 2025Sep 16, 2025

• ShiftSBOMGen-Node

  Public
  A pure client side CycloneDX SBOM Generator for node/npm projects

  ossbitbucketgitlab-ci+ 8

  ossbitbucketgitlab-cicicdspdxazure-devopssbomgithub-actionscyclonedxopen-source-security+ 1

  Shell

  •

  MIT License

  •11 fork•44 stars•33 issues•00 pull requests•Updated Feb 16, 2025Feb 16, 2025

• ShiftSBOM-Utils

  Public
  A pure client side Bitbucket Pipe containing a collection of open source tools to perform various types of additional analysis on a CycloneDX or SPDX sBOM (Soft…

  ossbitbucketcicd+ 6

  ossbitbucketcicdbitbucket-pipelinessbomcyclonedxopen-source-securitysupply-chain-securitybitbucket-pipes

  Go

  •

  MIT License

  •00 forks•22 stars•00 issues•00 pull requests•Updated Jan 31, 2025Jan 31, 2025

• cyclonedx-bitbucket-pipe

  Public
  Bitbucket pipe to generate a CycloneDX sBOM for Java, Go, Python & Node projects

  osssbomcyclonedx+ 3

  osssbomcyclonedxopen-source-securitysupply-chain-securitycyclonedx-sbom

  Shell

  •00 forks•00 stars•00 issues•00 pull requests•Updated Feb 9, 2024Feb 9, 2024