Skip to content
#

software-supply-chain-security

Star

Here are 65 public repositories matching this topic...

Language: All
Filter by language
All 65 Python 16 Go 9 Rust 9 Java 4 TypeScript 4 Dockerfile 2 JavaScript 2 Shell 2 C++ 1 HCL 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

bureado / awesome-software-supply-chain-security

Star 367

A compilation of resources in the software supply chain security domain, with emphasis on open source

static-analysis awesome-list security-vulnerability dependencies vulnerability-management software-supply-chain cve-scanning attestation package-management reproducible-builds devsecops software-composition-analysis vulnerability-scanning dependency-management oss-compliance sbom supply-chain-security supply-chain-attacks software-supply-chain-security
  • Updated Jun 7, 2026
sbom-tools

sbom-tool / sbom-tools

Star 227

Semantic SBOM/CBOM diff, quality scoring, and TUI analysis tool for CycloneDX/SPDX — covering component changes, dependency shifts, license conflicts, vulnerabilities, cryptographic inventory grading, and PQC compliance (CNSA 2.0, NIST IR 8547).

vex spdx appsec post-quantum-cryptography vulnerability-management sarif oss-compliance licence-management security-compliance sbom pqc cyclonedx software-supply-chain-security sbom-tool sbom-quality aibom cbom cryptographic-inventory cyber-resilience-act
  • Updated Jun 15, 2026
  • Rust

vishalgarg-sec / Software-Supply-Chain-Security

Star 148

A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from the web.

cncf owasp vex vulnerability-management software-security dependency-management sbom attestations slsa open-source-security supply-chain-security supply-chain-attacks software-supply-chain-security openssf software-bill-of-material software-transparency
  • Updated Jan 28, 2024

intelops / compage

Star 85

Compage - Low-Code Framework to develop Rest API, gRPC, dRPC, GraphQL, WebAssembly, microservices, FaaS, Temporal workloads, IoT and edge services, K8s controllers, K8s CRDs, K8s custom APIs, K8s Operators, K8s hooks, etc. with minimal coding and by automatically applying best practice methods like software supply chain security measures, SBOM, …

graphql rust golang microservices serverless containers rest-api grpc webassembly backend-services code-generation hacktoberfest containerization low-code no-code software-bill-of-materials sbom-generator cosign software-supply-chain-security visual-applications
  • Updated Aug 9, 2024
  • Go

Improve this page

Add a description, image, and links to the software-supply-chain-security topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the software-supply-chain-security topic, visit your repo's landing page and select "manage topics."

Learn more