With the arrival of Cyber Resilience Act it can be helpful to generate a Software Bill of Materials (SBOM), and to process other to look for known vulnerabilities.
Two open source tools under Apache 2.0 license:
- Syft, for SBOM generation: https://github.com/anchore/syft
- Grype, to process then the SBOM: https://github.com/anchore/grype
You must log in or register to comment.