Add SecuLens and SBOM Vulnerability Scanner

tools/masahiroid-sbom-vulnerability-scanner.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://cyclonedx.org/schema/tool-center-v2.tool.schema.json",
+  "specVersion": "2.0",
+  "tool": {
+    "publisher": "Masahiro NAKATSUGAWA",
+    "capabilities": [
+      "SBOM"
+    ],
+    "availability": [
+      "OPEN_SOURCE",
+      "OSI_APPROVED"
+    ],
+    "functions": [
+      "ANALYSIS"
+    ],
+    "supportedStandards": [
+      "CYCLONEDX",
+      "SPDX",
+      "PACKAGE_URL"
+    ],
+    "name": "SBOM Vulnerability Scanner",
+    "description": "VS Code extension that generates CycloneDX and SPDX SBOMs, imports CycloneDX/SPDX JSON, explores dependencies and licenses, scans for vulnerabilities with Trivy or npm audit, and exports HTML, JSON and Word reports.",
+    "repository_url": "https://github.com/masahiroid/sbom-vulnerability-scanner",
+    "website_url": "https://marketplace.visualstudio.com/items?itemName=masahirocom.sbom-vulnerability-scanner",
+    "analysis": [
+      "LICENSE_REPORTING"
+    ],
+    "packaging": [
+      "APPLICATION"
+    ],
+    "cycloneDxVersion": [
+      "CYCLONEDX_V1.4"
+    ]
+  }
+}

tools/seculens.json

@@ -0,0 +1,50 @@
+{
+  "$schema": "https://cyclonedx.org/schema/tool-center-v2.tool.schema.json",
+  "specVersion": "2.0",
+  "tool": {
+    "publisher": "Masahiro NAKATSUGAWA",
+    "capabilities": [
+      "SBOM"
+    ],
+    "availability": [
+      "OPEN_SOURCE",
+      "OSI_APPROVED"
+    ],
+    "functions": [
+      "ANALYSIS"
+    ],
+    "supportedStandards": [
+      "CYCLONEDX",
+      "SPDX",
+      "PACKAGE_URL"
+    ],
+    "name": "SecuLens",
+    "description": "CLI and library that reads CycloneDX and SPDX JSON SBOMs, matches npm, PyPI and Composer dependencies against OSV records, evaluates license policies and produces Word/JSON reports. Generates npm SBOMs using npm sbom.",
+    "repository_url": "https://github.com/masahiroid/seculens",
+    "website_url": "https://github.com/masahiroid/seculens#readme",
+    "analysis": [
+      "SECURITY_VULNERABILITIES",
+      "LICENSE_REPORTING",
+      "POLICY_EVALUATION"
+    ],
+    "packaging": [
+      "COMMAND_LINE_UTILITY",
+      "LIBRARY"
+    ],
+    "library": [
+      "JAVASCRIPT_TYPESCRIPT",
+      "NODE.JS"
+    ],
+    "cycloneDxVersion": [
+      "CYCLONEDX_V1.7",
+      "CYCLONEDX_V1.6",
+      "CYCLONEDX_V1.5",
+      "CYCLONEDX_V1.4"
+    ],
+    "supportedLanguages": [
+      "NODE.JS",
+      "PYTHON",
+      "PHP"
+    ]
+  }
+}