This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Tools

Open source management tools I contribute to. They cover SBOM generation, open source risk analysis, vulnerability and license management, and notice generation.

    Open source management tools I contribute to. Click a card to go to its GitHub repository.

    BomLens

    A local-first SBOM generator and open source risk assessor (CycloneDX). Produces an SBOM, an open source notice, and a security and license risk report from source, containers, binaries, firmware, or an existing SBOM. CLI or web UI, no SaaS.

    github.com/sktelecom/bomlens

    TRUSCA

    A self-hosted, open source SCA portal. Vulnerability (CVE), license compliance, and SBOM management in one UI. Black Duck and Snyk class capabilities, Apache-2.0.

    github.com/trustedoss/trusca

    onot

    Generate open source notices (OSS Notice) from SBOM documents (SPDX, CycloneDX, Excel) to HTML, Text, Markdown, or PDF. Offline, type-safe Python core with CLI, local API, and an installable desktop app.

    github.com/sktelecom/onot