#sbom
GitHub repositories that have self-applied the topic "sbom" — a creator-tagged metadata that surfaces how AI projects describe themselves.
REPOS Repos for #sbom (top 5 by stars)
Reachability triage for vulnerability scans. Feeds scanner findings to an LLM agent that reads your source and decides which CVEs are actually reachable.
RefuseHQ/refuseOpen-source server that refuses vulnerable package installs. The backend the refuse CLI shim calls.
Celmis-labs/CelmisSelf-hosted. Your monitoring already told you something broke — Celmis is what happens next: it knows which repository the alert belongs to, and an embedded Claude Code session on your own subscription fixes it and opens a pull request. One symbol graph also answers cross-repo questions, reviews PRs, and exports a CycloneDX SBOM. AGPL-3.0.
mlab-sh/mlab-claudeClaude Code plugin marketplace for mlab.sh - threat intelligence & supply-chain security workflows for SOC/DFIR teams
topchimp/bombasticClaude skill to generate Software Bill of Materials (SBOM) with license tracking and supply chain security. Generate SPDX or CycloneDX documents, check dependencies for vulnerabilities and track licenses
RELATED Other topics · full topics ranking →
#claude-code
2,815#ai-agents
2,183#llm
1,690#claude
1,475#mcp
1,359#python
1,349#developer-tools
1,231#ai
1,028#codex
996Aggregated by case-insensitive match against topics_json of each repo's latest content snapshot. methodology