Skip to content

Commit e0d08fd

Browse files
authored
Add DejaCode and PurlDB to project list
1 parent f89816b commit e0d08fd

File tree

2 files changed

+55
-0
lines changed

2 files changed

+55
-0
lines changed
Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
.. _dejacode-project:
2+
3+
DejaCode
4+
========
5+
6+
`DejaCode <https://github.com/aboutcode-org/dejacode>`_: is a Cloud
7+
application server that automates open source license compliance and ensures
8+
software supply chain integrity. It is a comprehensive enterprise-level application,
9+
powered by `ScanCode <https://github.com/nexB/scancode-toolkit>`_,
10+
the industry-leading code scanner.
11+
12+
- Run scans and track all the open source and third-party products and components used
13+
in your software.
14+
- Apply usage policies at the license or component level, and integrate into
15+
ScanCode to ensure compliance.
16+
- Capture software inventories (SBOMs), generate compliance artifacts, and keep
17+
historical data.
18+
- Ensure FOSS compliance with enterprise-grade features and integrations for DevOps and
19+
software systems.
20+
- Scan a software package, simply by providing its Download URL, to get comprehensive
21+
details of its composition and create an SBOM.
22+
- Load software package data into DejaCode with the integration for the open source
23+
ScanCode.io and ScanCode Toolkit projects to create a product’s SBOM.
24+
- Track and report vulnerability tracking and reporting by integrating with the open
25+
source VulnerableCode project.
26+
- Create, publish and share SBOM documents in DejaCode, including detailed attribution
27+
documentation and custom reports in multiple file formats and standards, such as
28+
CycloneDX and SPDX.
29+
30+
- Read more at: https://dejacode.readthedocs.io
31+
- Get the code at: https://github.com/aboutcode-org/dejacode
Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
.. purldb-project:
2+
3+
PurlDB
4+
======
5+
6+
`PurlDB <https://github.com/aboutcode-org/purldb>`_: is a set of
7+
tools to create and expose a database of purls (Package URLs). This project is
8+
sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and
9+
nexB for https://www.aboutcode.org/
10+
11+
The purldb tools include:
12+
13+
- PackageDB that is the reference model (based on ScanCode toolkit) that contains
14+
package data with PURL (Package URLs) being a first class citizen.
15+
- MineCode that contains utilities to mine package repositories
16+
- MatchCode that contains utilities to index package metadata and resources for
17+
matching
18+
- MatchCode.io that provides package matching functionalities for codebases
19+
- ClearCode that contains utilities to mine Clearlydefined for package data
20+
- purldb-toolkit CLI utility and library to use the PurlDB, its API and various
21+
related libraries.
22+
23+
- Read more at: https://purldb.readthedocs.io
24+
- Get the code at: https://github.com/aboutcode-org/purldb

0 commit comments

Comments
 (0)