cbomkit

A toolset for dealing with Cryptography Bill of Materials (CBOM)

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

A tool for detecting cryptographic assets in container images and directories, and generating CBOMs.

GitHub Action to generate Cryptography Bill of Materials (CBOM)

Automated Post-Quantum Cryptographic Migration Engine. Consumes CycloneDX CBOMs, transforms legacy algorithms into hybrid classical + PQC (ML-KEM / ML-DSA) form via vetted templates, verifies with dual-track validation, and opens human-approved atomic PRs.

This repository contains a SonarQube Plugin that detects cryptographic assets in source code and generates CBOM.

Builds and runs the CBOMkit stack locally using Docker, producing all artifacts from source without GitHub Packages or a container registry.

Deployment guide of PQCA CBOMKit (IBM) - Docker Setup