sbom-management

Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.

日本市場向けオープ���ソースSBOM管理ダッシュボード / Open-source SBOM management dashboard with NVD/JVN vulnerability correlation, Japanese UI, and METI guidelines compliance

GitHub Action for installing and running sbom-tools — semantic SBOM diff, validation, and quality scoring

Policy-driven Git repository governance and compliance automation with AI-powered code review, supply chain security, and transparent decision-making through OPA rules and SBOM generation.

SBOMinify is a GitHub Action to capture and list installed packages and their versions in a Docker image, generating Software Bill of Materials (SBOM) files. This action leverages some special technics to scan Docker images and output SBOM files in both table and JSON formats.