sktelecom

sktelecom/bomlens

BomLens — a local-first SBOM generator & open-source risk assessor (CycloneDX). Produce an SBOM, an open-source notice, and a security/license risk report from source code, containers, binaries, firmware, or an SBOM you received. CLI or web UI, no SaaS.

2 good first / help-wanted issues · Shell · last activity Oct 17, 2026

23 stars 2 forks 23 watchers Shell Apache License 2.0
cdxgen cyclonedx devsecops docker firmware-analysis license-compliance open-source-security sbom sbom-generator sca software-bill-of-materials supply-chain-security syft trivy vulnerability-scanning
View on GitHub Website
2 Open Issues Need Help Last updated: Oct 17, 2026

Open Issues Need Help

View All on GitHub
Verify a release: add the PowerShell commands for Windows 1 day ago
documentation good first issue
sktelecom/bomlens
23

BomLens — a local-first SBOM generator & open-source risk assessor (CycloneDX). Produce an SBOM, an open-source notice, and a security/license risk report from source code, containers, binaries, firmware, or an SBOM you received. CLI or web UI, no SaaS.

Shell
#cdxgen#cyclonedx#devsecops#docker#firmware-analysis#license-compliance#open-source-security#sbom#sbom-generator#sca#software-bill-of-materials#supply-chain-security#syft#trivy#vulnerability-scanning
Add a --tool-version option that prints the scanner image version 1 day ago
enhancement good first issue
sktelecom/bomlens
23

BomLens — a local-first SBOM generator & open-source risk assessor (CycloneDX). Produce an SBOM, an open-source notice, and a security/license risk report from source code, containers, binaries, firmware, or an SBOM you received. CLI or web UI, no SaaS.

Shell
#cdxgen#cyclonedx#devsecops#docker#firmware-analysis#license-compliance#open-source-security#sbom#sbom-generator#sca#software-bill-of-materials#supply-chain-security#syft#trivy#vulnerability-scanning