guacsec / guac

GUAC aggregates software security metadata into a high fidelity graph database.

cdxgen / cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server