Browse & filter

Filter by platform, license text, maturity, maintenance cadence, and editorial tags like privacy-focused or self-hosted. Search matches names, summaries, tags, and use cases.

Grype

Also strong

Vulnerability scanner for container images and filesystems using Anchore’s vulnerability DB and Syft SBOM input.

vulnerabilitycontainerssbomci

Security & Privacy

Syft

Also strong

CLI and library for generating SBOMs (SPDX, CycloneDX) from images, directories, and archives.

sbomsupply-chaincompliancecontainers

Security & Privacy

Dependency-Track

Also strong

Continuous SBOM analysis platform tracking component vulnerabilities, policies, and audit trails for supply chain risk.

sbomsupply-chainowaspvulnerabilityself-hosted

Security & Privacy

OSV-Scanner

Also strong

Google tool to find known vulnerabilities in open source dependencies from lockfiles, SBOMs, or directories using the OSV database.

scadependenciescvedevsecopssbom