Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.
BSD 2-Clause "Simplified" License
968
stars
188
forks
source link
Update README.md: SPDX is now an ISO standard #1175
Signed-off-by: Marc-Etienne Vargenau marc-etienne.vargenau@nokia.com