softwarehuis/sbom-viewer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
SBOM viewer, simplified and forked from https://github.com/CycloneDX/Sunshine/
54 commits 1 branch 0 tags 3.1 MiB
  • JavaScript 75%
  • CSS 13.1%
  • HTML 11.1%
  • Shell 0.8%
Find a file
Exact
Milo van der Linden ec513d97f4 Simplified the entire application
2026-07-20 11:09:51 +02:00
css Simplified the entire application 2026-07-20 11:09:51 +02:00
js Simplified the entire application 2026-07-20 11:09:51 +02:00
scripts Simplified the entire application 2026-07-20 11:09:51 +02:00
vendor Simplified the entire application 2026-07-20 11:09:51 +02:00
index.html Simplified the entire application 2026-07-20 11:09:51 +02:00
LICENSE first commit 2024-12-12 00:59:14 +00:00
README.md Simplified the entire application 2026-07-20 11:09:51 +02:00
sample-sbom.json Simplified the entire application 2026-07-20 11:09:51 +02:00

README.md 

  ░██████   ░██     ░██ ░███    ░██   ░██████   ░██     ░██ ░██████░███    ░██ ░███████ 
░██         ░██     ░██ ░██░██  ░██ ░██         ░██     ░██   ░██  ░██░██  ░██ ░██        
 ░████████  ░██     ░██ ░██ ░██ ░██  ░████████  ░██████████   ░██  ░██ ░██ ░██ ░██████  
        ░██ ░██     ░██ ░██  ░██░██         ░██ ░██     ░██   ░██  ░██  ░██░██ ░██             
  ░██████     ░██████   ░██    ░███   ░██████   ░██     ░██ ░██████░██    ░███ ░███████

Sunshine: actionable CycloneDX visualization tool.

It takes a JSON CycloneDX file as input and provides as output a chart and table representation of the components, dependencies, vulnerabilities and licenses. It can also enrich data by adding EPSS and CISA KEV information. A ready-to-try example is included as sample-sbom.json.


All submitted data is processed locally within your browser, without being transmitted anywhere else.


Usage:


Offline enrichment (optional):

./scripts/vendor-offline.sh

This downloads EPSS and CISA KEV CSV mirrors into vendor/enrichment/ so enrichment works without network access. Re-run periodically to refresh (upstream updates about every 2 hours).


Credits: