4 ms·
Bill of Materials (BOM) software for identifying dependencies along with versions that are out of date or vulnerable is a growing market in Government.
by atlgator 2y ago
Bill of Materials (BOM) software for identifying dependencies along with versions that are out of date or vulnerable is a growing market in Government.
- bostik 2y agoI can wholeheartedly recommend Syft.[0] Decoupling SBOM data collection from vulnerability tracking (with your tool of choice) is a nice capability. 0: https://github.com/anchore/syft https://github.com/anchore/syft
- morbicer 2y agoI have good experience with https://github.com/pivotal/LicenseFinder https://github.com/pivotal/LicenseFinder This produces BOM with versions but rather than out of date it focuses on licenses which comes handy during acquisitions due diligence. Supports many languages