A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from the web.

♾️ Collection of DevSecOps Notes + Resources + Courses + Tools

sbomify is a product security artifact management platform.

GitHub action to produce a SBOM report from a given Black Duck project

📓 A python CLI tool to extract a software bill of materials and license info from a vcpkg manifest.

Advanced SBOM visualization tool. Provides graphical information about the dependency stack of your application, list of vulnerabilities and overall application health. Supports multiple methods of data aggregation and filtering in a convenient, modern interface.

Bill of Materials for the Mycelium project