diff --git a/tools/masahiroid-sbom-vulnerability-scanner.json b/tools/masahiroid-sbom-vulnerability-scanner.json new file mode 100644 index 0000000..8a54dbe --- /dev/null +++ b/tools/masahiroid-sbom-vulnerability-scanner.json @@ -0,0 +1,35 @@ +{ + "$schema": "https://cyclonedx.org/schema/tool-center-v2.tool.schema.json", + "specVersion": "2.0", + "tool": { + "publisher": "Masahiro NAKATSUGAWA", + "capabilities": [ + "SBOM" + ], + "availability": [ + "OPEN_SOURCE", + "OSI_APPROVED" + ], + "functions": [ + "ANALYSIS" + ], + "supportedStandards": [ + "CYCLONEDX", + "SPDX", + "PACKAGE_URL" + ], + "name": "SBOM Vulnerability Scanner", + "description": "VS Code extension that generates CycloneDX and SPDX SBOMs, imports CycloneDX/SPDX JSON, explores dependencies and licenses, scans for vulnerabilities with Trivy or npm audit, and exports HTML, JSON and Word reports.", + "repository_url": "https://github.com/masahiroid/sbom-vulnerability-scanner", + "website_url": "https://marketplace.visualstudio.com/items?itemName=masahirocom.sbom-vulnerability-scanner", + "analysis": [ + "LICENSE_REPORTING" + ], + "packaging": [ + "APPLICATION" + ], + "cycloneDxVersion": [ + "CYCLONEDX_V1.4" + ] + } +} diff --git a/tools/seculens.json b/tools/seculens.json new file mode 100644 index 0000000..8e8c038 --- /dev/null +++ b/tools/seculens.json @@ -0,0 +1,50 @@ +{ + "$schema": "https://cyclonedx.org/schema/tool-center-v2.tool.schema.json", + "specVersion": "2.0", + "tool": { + "publisher": "Masahiro NAKATSUGAWA", + "capabilities": [ + "SBOM" + ], + "availability": [ + "OPEN_SOURCE", + "OSI_APPROVED" + ], + "functions": [ + "ANALYSIS" + ], + "supportedStandards": [ + "CYCLONEDX", + "SPDX", + "PACKAGE_URL" + ], + "name": "SecuLens", + "description": "CLI and library that reads CycloneDX and SPDX JSON SBOMs, matches npm, PyPI and Composer dependencies against OSV records, evaluates license policies and produces Word/JSON reports. Generates npm SBOMs using npm sbom.", + "repository_url": "https://github.com/masahiroid/seculens", + "website_url": "https://github.com/masahiroid/seculens#readme", + "analysis": [ + "SECURITY_VULNERABILITIES", + "LICENSE_REPORTING", + "POLICY_EVALUATION" + ], + "packaging": [ + "COMMAND_LINE_UTILITY", + "LIBRARY" + ], + "library": [ + "JAVASCRIPT_TYPESCRIPT", + "NODE.JS" + ], + "cycloneDxVersion": [ + "CYCLONEDX_V1.7", + "CYCLONEDX_V1.6", + "CYCLONEDX_V1.5", + "CYCLONEDX_V1.4" + ], + "supportedLanguages": [ + "NODE.JS", + "PYTHON", + "PHP" + ] + } +}