Skip to content

Commit 597f9f4

Browse files
Update README.md
Signed-off-by: Chandu Paladugu <[email protected]>
1 parent 0369bb5 commit 597f9f4

File tree

1 file changed

+20
-2
lines changed

1 file changed

+20
-2
lines changed

README.md

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,8 @@ CLI/CI Tool for Automating Vulnerability Management for Enhancing Software Suppl
88
- Trivy
99
- Grype
1010
- Syft
11-
- CycloneDX
11+
- CycloneDX & SPDX
12+
- openSSF Scorecard scode
1213
- [Snyk](https://snyk.io/)
1314
- [Tenable](https://www.tenable.com/products)
1415
- Pyroscope
@@ -53,7 +54,24 @@ CLI/CI Tool for Automating Vulnerability Management for Enhancing Software Suppl
5354
> - Integration with Qualys, Nessus, Rapid 7, DeepFactor, etc.
5455
> - Productivity and User Experience - Previous & Updated Vulnerability detail views, Display of asset selection rules to view vulnerability details per service/node/cluster/namespace/pod/etc. and also overall view, etc.
5556
> - Risk-based Posture Management - Risk Configuration + Risk Customizations, EPSS factor in risk calculation, etc.
56-
> - Manage Vulnerabilities and Assets - Filter vulnerabilities by asset & vulnerability tags, export vulnerability data in csv or directly generate graphs using clickhouse/cassandra as datasource, Linking of Teams to Apps/Environments/Platforms/Clusters/Vulnerabilities/etc., multi-selection for varieties of filters to visualize the data in different charts, etc.
57+
> - Manage Vulnerabilities and Assets - Filter vulnerabilities by asset & vulnerability tags, export vulnerability data in csv or directly generate graphs using clickhouse/cassandra as datasource, Linking of Teams to Apps/Environments/Platforms/Clusters/Vulnerabilities/etc., multi-selection for varieties of filters to visualize the data in different charts, etc.
58+
> - Build features mentioned in these CycloneDX based reports :
59+
- [CycloneDX BOM server](https://github.com/CycloneDX/cyclonedx-bom-repo-server)
60+
, [CDXGen](https://github.com/CycloneDX/cdxgen)
61+
, [CycloneDX Python lib for Programmatic purpose](https://github.com/CycloneDX/cyclonedx-python-lib)
62+
, [CycloneDX Web Tool](https://github.com/CycloneDX/cyclonedx-web-tool)
63+
, [SBOM-Utility API platform](https://github.com/cyclonedx/sbom-utility)
64+
, [eBay SBOM scorecard](https://github.com/eBay/sbom-scorecard)
65+
, [Agentless Vuln. Scanner - Vuls](https://vuls.io/)
66+
, [Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents](https://github.com/madpah/vexy)
67+
, [openSSF Scorecard API](https://api.securityscorecards.dev/#/)
68+
, [same as Tally project](https://github.com/jetstack/tally) with openSSF scorecard
69+
, [SBOM dependency graph diagram](https://github.com/anthonyharrison/sbom2dot) similar to call graph diagram
70+
, [Transform SBOM contents into Markdown](https://github.com/anthonyharrison/sbom2doc)
71+
, [Scan K8s with Syft - SBOM Operator](https://github.com/ckotzbauer/sbom-operator)
72+
, [GitHub Action / Tekton CI steps to show differences in SBOMs](https://github.com/thepwagner/sbom-action)
73+
, [SBOM publish, verify & share - this is perfect example on how we wanted to build certain feature](https://github.com/interlynk-io)
74+
5775

5876
### Usage
5977

0 commit comments

Comments
 (0)