cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

Language: javascript

0 stars · 0 views

Viewing path: ATTRIBUTION.md

Files

docs (txt)

CDX_VERIFY.md (md)

AI_BOM.md (md)

ARCHITECTURE.md (md)

_sidebar.md (md)

CDX_AUDIT.md (md)

FEATURE_COVERAGE.md (md)

HBOM.md (md)

PERMISSIONS.md (md)

LESSON10.md (md)

LESSON9.md (md)

LESSON2.md (md)

LESSON15.md (md)

AI_ECOSYSTEM_PROMPT.md (md)

CDX_SIGN.md (md)

_coverpage.md (md)

README.md (md)

MONOREPO.md (md)

CDX_CONVERT.md (md)

ADVANCED.md (md)

TROUBLESHOOTING.md (md)

LESSON5.md (md)

SUPPORT.md (md)

LESSON3.md (md)

SERVER.md (md)

CLI.md (md)

CDX_VALIDATE.md (md)

ml_profiles.md (md)

TESTING.md (md)

LESSON13.md (md)

LESSON11.md (md)

LESSON8.md (md)

_media (txt)

why-cdxgen.jpg (image)

GithubLogo-LightBg.png (image)

saasbom-services.png (image)

LevoLogo-LightBg.jpg (image)

callstack-evidence.png (image)

cdxgen-tree.jpg (image)

cdxgen.png (image)

MicrosoftLogo.png (image)

sbom-sign.jpg (image)

occurrence-evidence.png (image)

LESSON16.md (md)

ENV.md (md)

THREAT_MODEL.md (md)

BOM_PIPELINE.md (md)

BOM_PIPELINE_EXAMPLES.md (md)

LESSON4.md (md)

REPL.md (md)

TRACEBOM.md (md)

ARCHITECTURE_EXECUTION_MODES.md (md)

GO_EVINSE_GOLEM.md (md)

ARCHITECTURE_ECOSYSTEM_EXAMPLES.md (md)

OBOM_MACOS_TROUBLESHOOTING.md (md)

TRUST_ENRICHMENT_DIFF.md (md)

BOM_AUDIT.md (md)

GETTING_STARTED.md (md)

PROJECT_TYPES.md (md)

AI_PROVENANCE.md (md)

ALLOWED_HOSTS_AND_COMMANDS.md (md)

LESSON17.md (md)

LESSON12.md (md)

LESSON7.md (md)

SUPPLY_CHAIN_TRANSPARENCY.md (md)

ADD_ECOSYSTEM.md (md)

MCP.md (md)

LESSON14.md (md)

EVINSE.md (md)

OBOM_LESSONS.md (md)

index.html (html)

GO_EVINSE_GOLEM_THREAT_MODEL.md (md)

LESSON18.md (md)

LESSON1.md (md)

LESSON6.md (md)

repotests (txt)

dynamic-smoke (txt)

expected-bom.json (json)

README.md (md)

app.js (js)

test.sh (sh)

deno.json (json)

index.cjs (cjs)

lib (txt)

audit (txt)

index.js (js)

index.poku.js (js)

scoring.js (js)

progress.poku.js (js)

scoring.poku.js (js)

progress.js (js)

targets.poku.js (js)

reporters.js (js)

targets.js (js)

validator (txt)

complianceEngine.poku.js (js)

index.js (js)

complianceRules.poku.js (js)

complianceRules.js (js)

index.poku.js (js)

reporters (txt)

index.js (js)

json.js (js)

console.js (js)

annotations.js (js)

sarif.js (js)

bomValidator.js (js)

complianceEngine.js (js)

reporters.poku.js (js)

bomValidator.poku.js (js)

stages (txt)

postgen (txt)

annotator.js (js)

ruleEngine.js (js)

auditBom.js (js)

auditBom.aiProvenance.poku.js (js)

hostTopologyAudit.poku.js (js)

postgen.js (js)

annotator.poku.js (js)

postgen.poku.js (js)

spdxConverter.poku.js (js)

auditBom.aiOversight.poku.js (js)

spdxConverter.js (js)

pregen (txt)

pregen.js (js)

envAudit.poku.js (js)

envAudit.js (js)

managers (txt)

piptree.poku.js (js)

binary.poku.js (js)

docker.js (js)

binary.e2e.poku.js (js)

containerutils.js (js)

oci.js (js)

dockerConnection.js (js)

dockerConnection.poku.js (js)

docker.getConnection.poku.js (js)

oci.poku.js (js)

binary.js (js)

docker.poku.js (js)

piptree.js (js)

cli (txt)

typedefs.poku.js (js)

cliOptions.poku.js (js)

asar.poku.js (js)

cliOptions.js (js)

server (txt)

openapi.yaml (yaml)

server.poku.js (js)

server.js (js)

evinser (txt)

db.js (js)

swiftsem.poku.js (js)

scalasem.js (js)

evinser.js (js)

db.poku.js (js)

evinser.poku.js (js)

swiftsem.js (js)

helpers (txt)

aiProvenanceCollector.js (js)

golem.js (js)

versutils.js (js)

envcontext.js (js)

unicodeScan.js (js)

vsixutils.poku.js (js)

spdxExpression.poku.js (js)

dosaiParsers.js (js)

bomSigner.poku.js (js)

pylockutils.js (js)

formulationParsers.poku.js (js)

versutils.poku.js (js)

licenseEnhancer.poku.js (js)

traceRunner.poku.js (js)

agentFormulationParser.poku.js (js)

aiProvenanceCollector.repo.poku.js (js)

table.poku.js (js)

logger.poku.js (js)

analyzerScope.js (js)

pylockutils.poku.js (js)

httpClient.poku.js (js)

gradleutils.poku.js (js)

spdxUtils.js (js)

logger.js (js)

plugins.js (js)

mcpConfigParser.poku.js (js)

forgeEnricher.js (js)

envcontext_git.poku.js (js)

spdxUtils.poku.js (js)

plugins.poku.js (js)

gtfobins.js (js)

registryProvenance.poku.js (js)

formulationParsers.js (js)

osqueryTransform.js (js)

atomUtils.js (js)

sbtutils.js (js)

golem.poku.js (js)

licenseEnhancer.js (js)

provenanceUtils.js (js)

source.js (js)

rusi.poku.js (js)

aiOversightCollector.js (js)

mcpDiscovery.js (js)

inventoryStats.js (js)

mcpDiscovery.poku.js (js)

hbom.poku.js (js)

aiOversightCollector.poku.js (js)

aiCollector.js (js)

dotnetutils.poku.js (js)

dynamic.poku.js (js)

communityAiConfigParser.js (js)

osPackageResolver.poku.js (js)

hbom.js (js)

chromextutils.js (js)

hbomLoader.js (js)

atomUtils.poku.js (js)

annotationFormatter.js (js)

containerRisk.js (js)

cbomutils.poku.js (js)

mcp.js (js)

npmutils.poku.js (js)

spdxExpression.js (js)

hbomAnalysis.js (js)

provenanceUtils.poku.js (js)

aiCollector.poku.js (js)

osinfo.js (js)

propertySanitizer.js (js)

depsUtils.poku.js (js)

source.poku.js (js)

lolbas.poku.js (js)

ciParsers (txt)

circleCi.poku.js (js)

jenkins.js (js)

githubActions.js (js)

common.js (js)

azurePipelines.poku.js (js)

gitlabCi.poku.js (js)

circleCi.js (js)

githubActions.poku.js (js)

jenkins.poku.js (js)

azurePipelines.js (js)

gitlabCi.js (js)

lolbas.js (js)

chromextutils.poku.js (js)

caxa.js (js)

mcp.poku.js (js)

exportUtils.js (js)

dosai.poku.js (js)

pythonutils.poku.js (js)

protobom.js (js)

unicodeScan.poku.js (js)

depsUtils.js (js)

bomUtils.poku.js (js)

evidenceUtils.js (js)

vsixutils.js (js)

evidenceUtils.poku.js (js)

inventoryStats.poku.js (js)

osPackageResolver.js (js)

agentFormulationParser.js (js)

gradleutils.js (js)

protobom.poku.js (js)

analyzer.poku.js (js)

pythonutils.js (js)

annotationFormatter.poku.js (js)

npmutils.js (js)

bomUtils.js (js)

bunutils.poku.js (js)

protobomLoader.js (js)

protobomLoader.poku.js (js)

aiModelVariants.js (js)

display.js (js)

gtfobins.poku.js (js)

containerRisk.poku.js (js)

httpClient.js (js)

asarutils.poku.js (js)

remote (txt)

dependency-track.poku.js (js)

huggingface.js (js)

huggingface.poku.js (js)

dependency-track.js (js)

aiModelVariants.poku.js (js)

auditCategories.js (js)

dotnetutils.js (js)

rusi.js (js)

jsonLike.js (js)

registryProvenance.js (js)

exportUtils.poku.js (js)

traceRunner.js (js)

asarutils.js (js)

hbomAnalysis.poku.js (js)

table.js (js)

communityAiConfigParser.poku.js (js)

envcontext.poku.js (js)

hostTopology.poku.js (js)

cbomutils.js (js)

auditCategories.poku.js (js)

hostTopology.js (js)

sbtutils.poku.js (js)

bomSigner.js (js)

dosai.js (js)

aiInventory.poku.js (js)

propertySanitizer.poku.js (js)

display.poku.js (js)

aiInventory.js (js)

osqueryTransform.poku.js (js)

dynamic.js (js)

jsonLike.poku.js (js)

bunutils.js (js)

mcpConfigParser.js (js)

huggingfaceUtils.js (js)

rustFormulationParser.js (js)

aiProvenanceCollector.poku.js (js)

third-party (txt)

README.md (md)

arborist (txt)

lib (txt)

calc-dep-flags.js (js)

index.js (js)

optional-set.js (js)

tree-check.js (js)

signal-handling.js (js)

debug.js (js)

diff.js (js)

inventory.js (js)

node.js (js)

edge.js (js)

retire-path.js (js)

yarn-lock.js (js)

relpath.js (js)

override-set.js (js)

place-dep.js (js)

spec-from-lock.js (js)

peer-entry-sets.js (js)

override-resolves.js (js)

printable.js (js)

bin-links.js (js)

version-from-tgz.js (js)

signals.js (js)

arborist (txt)

index.js (js)

load-virtual.js (js)

load-actual.js (js)

reset-dep-flags.js (js)

shrinkwrap.js (js)

tracker.js (js)

from-path.js (js)

gather-dep-set.js (js)

deepest-nesting-target.js (js)

link.js (js)

realpath.js (js)

consistent-resolve.js (js)

can-place-dep.js (js)

case-insensitive-map.js (js)

dep-valid.js (js)

README.md (md)

LICENSE.md (md)

CHANGELOG.md (md)

parsers (txt)

iri.js (js)

gitAiNotes.js (js)

gguf.poku.js (js)

iri.poku.js (js)

ollama.poku.js (js)

npmrc.js (js)

npmrc.poku.js (js)

gitAiNotes.poku.js (js)

ollama.js (js)

gguf.js (js)

huggingfaceManifest.poku.js (js)

huggingfaceManifest.js (js)

test (txt)

Podfile.json (json)

gomod (txt)

gopkg (txt)

diff (txt)

diff_tests.py (py)

README.md (md)

requirements.txt (txt)

generate.py (py)

helpers (txt)

asar-fixture-builder.js (js)

data (txt)

httpclient (txt)

sample.json (json)

sample.txt (txt)

angular-template-repotest (txt)

package.json (json)

package-lock.json (json)

angular.json (json)

src (txt)

main.ts (ts)

app (txt)

inline-icons.component.ts (ts)

help.component.html (html)

dist-info (txt)

sample-mvn-tree.txt (txt)

pnpm-lock9c.yaml (yaml)

pnpm-lock6a.yaml (yaml)

pnpm-nested-locks-repotest (txt)

packages (txt)

member (txt)

ATTRIBUTION.md (markdown)

github-repos/cdxgen

cdxgen

Public

• Updated Jul 14, 2026

Select a file

Tap "Show Files" to select a file

Files

docs

lib

repotests

test

ATTRIBUTION.mdabout 13 hours ago

deno.jsonabout 13 hours ago

index.cjsabout 13 hours ago

364 files, 37 folders7.2MB total

Select a file

Select a file to view its content

Choose from the file browser on the left

About

@github-repos

Author

0stars

0views

Created Jan 19, 2026