cyclonedx — independent software & tools

2 independent cyclonedx listings the big search engines bury.

• trusca

  github · Free · by trustedoss

  Self-hosted, open-source SCA portal — vulnerability (CVE), license compliance, and SBOM management in one UI. Black Duck/Snyk-class capabilities, Apache-2.0.

• agent-bom

  github · Free · by msaad00

  AI supply-chain & cloud security scanner and self-hosted control plane — agents, MCP, packages, cloud estate, non-human identities, and LLM cost. SBOM/SARIF, graph attack-paths, runtime enforcement, and compliance evidence.