BomLens is a local-first SBOM generator and open-source risk assessor, and an OWASP Incubator project. It produces a CycloneDX SBOM, an open-source notice, and a security and license risk report from source code, a container image, a binary, firmware, an SBOM you received, or a HuggingFace AI model. It runs from the CLI or a browser UI on your own machine, with no SaaS.
Development happens at sktelecom/bomlens. Please open issues and pull requests there.
- Source code and releases: https://github.com/sktelecom/bomlens
- Documentation: https://sktelecom.github.io/bomlens/
- Live demo: https://sktelecom.github.io/bomlens/demo/
- OWASP project page: https://owasp.org/www-project-bomlens/
BomLens is licensed under the Apache License 2.0.