ShiftLeftCyber

All

13 repositories

sbom-signing-best-practices
Public
A multi-language reference implementation for computing canonical SBOM hashes. Supports CycloneDX v1.7 & SPDX v2.2, v3.0 (JSON) to demonstrate cross-language in…
javascript python java go rust json signature verification hash jsf
Java
•
Apache License 2.0
•0•5•0•0•Updated Feb 20, 2026Feb 20, 2026
sbom-validator
Public
A lightweight Go library for validating Software Bill of Materials (SBOM) against industry-standard specifications
golang supply-chain bom vex spdx bill-of-materials software-bill-of-materials go-module sbom cyclonedx
Go
•
MIT License
•0•8•0•0•Updated Jan 21, 2026Jan 21, 2026
shiftleftcyber.github.io
Public
CSS
•0•1•0•1•Updated Jan 20, 2026Jan 20, 2026
securesbom-sdk-golang
Public
golang implementation of the SecureSBOM SDK
Go
•
Apache License 2.0
•0•1•0•0•Updated Jan 19, 2026Jan 19, 2026
secure-sbom-action
Public
GitHub Action for SecureSBOM
supply-chain bom vex spdx bill-of-materials software-bill-of-materials sbom cyclonedx
Go
•
Apache License 2.0
•0•1•0•0•Updated Jan 18, 2026Jan 18, 2026
tool-center
Public
Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services
HTML
•
Creative Commons Attribution Share Alike 4.0 International
•40•0•0•0•Updated Jan 5, 2026Jan 5, 2026
sbomasm
Public
sbomasm: The Complete SBOM Management Toolkit
Go
•
Apache License 2.0
•12•0•0•0•Updated Dec 31, 2025Dec 31, 2025
securesbom-demo
Public
A collection of workflows showcasing SecureSBOM
Java
•
Apache License 2.0
•0•1•0•0•Updated Oct 18, 2025Oct 18, 2025
sbom-everywhere
Public
Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
Vue
•
Apache License 2.0
•41•0•0•0•Updated Sep 16, 2025Sep 16, 2025
ShiftSBOMGen-Node
Public
A pure client side CycloneDX SBOM Generator for node/npm projects
oss bitbucket gitlab-ci cicd spdx azure-devops sbom github-actions cyclonedx open-source-security
Shell
•
MIT License
•1•4•3•0•Updated Feb 16, 2025Feb 16, 2025
ShiftSBOM-Utils
Public
A pure client side Bitbucket Pipe containing a collection of open source tools to perform various types of additional analysis on a CycloneDX or SPDX sBOM (Soft…
oss bitbucket cicd bitbucket-pipelines sbom cyclonedx open-source-security supply-chain-security bitbucket-pipes
Go
•
MIT License
•0•2•0•0•Updated Jan 31, 2025Jan 31, 2025
ShiftSBOMGen
Public
A pure client side Software Bill of Materials (SBOM) generator for various project types. Supports CycloneDX & SPDX.
oss bitbucket cicd spdx sbom cyclonedx supply-chain-security sbom-generator bitbucket-pipes open-source-se
Makefile
•
MIT License
•0•3•0•0•Updated Jan 29, 2025Jan 29, 2025
cyclonedx-bitbucket-pipe
Public
Bitbucket pipe to generate a CycloneDX sBOM for Java, Go, Python & Node projects
oss sbom cyclonedx open-source-security supply-chain-security cyclonedx-sbom
Shell
•0•0•0•0•Updated Feb 9, 2024Feb 9, 2024