Skip to content
#

software-supply-chain-security

Star

Here are 71 public repositories matching this topic...

Language: All
Filter by language
All 71 Python 16 Go 9 Rust 9 Java 4 TypeScript 4 Dockerfile 2 HCL 2 Shell 2 C 1 C++ 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

bureado / awesome-software-supply-chain-security

Star 374

A compilation of resources in the software supply chain security domain, with emphasis on open source

static-analysis awesome-list security-vulnerability dependencies vulnerability-management software-supply-chain cve-scanning attestation package-management reproducible-builds devsecops software-composition-analysis vulnerability-scanning dependency-management oss-compliance sbom supply-chain-security supply-chain-attacks software-supply-chain-security
  • Updated Jun 7, 2026
sbom-tools

sbom-tool / sbom-tools

Star 238

Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.

vex spdx appsec post-quantum-cryptography vulnerability-management sarif oss-compliance licence-management security-compliance sbom pqc cyclonedx software-supply-chain-security sbom-tool sbom-quality aibom cbom cryptographic-inventory eu-ai-act cyber-resilience-act
  • Updated Aug 6, 2026
  • Rust

vishalgarg-sec / Software-Supply-Chain-Security

Star 150

A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from the web.

cncf owasp vex vulnerability-management software-security dependency-management sbom attestations slsa open-source-security supply-chain-security supply-chain-attacks software-supply-chain-security openssf software-bill-of-material software-transparency
  • Updated Jan 28, 2024

intelops / compage

Star 85

Compage - Low-Code Framework to develop Rest API, gRPC, dRPC, GraphQL, WebAssembly, microservices, FaaS, Temporal workloads, IoT and edge services, K8s controllers, K8s CRDs, K8s custom APIs, K8s Operators, K8s hooks, etc. with minimal coding and by automatically applying best practice methods like software supply chain security measures, SBOM, …

graphql rust golang microservices serverless containers rest-api grpc webassembly backend-services code-generation hacktoberfest containerization low-code no-code software-bill-of-materials sbom-generator cosign software-supply-chain-security visual-applications
  • Updated Aug 9, 2024
  • Go

Improve this page

Add a description, image, and links to the software-supply-chain-security topic page so that developers can more easily learn about it.

See More

Curate this topic

Add this topic to your repo

To associate your repository with the software-supply-chain-security topic, visit your repo's landing page and select "manage topics."

Learn more