* [Chainloop v1.122.0](https://github.com/chainloop-dev/chainloop) – Evidence store and policy engine for Software Supply Chain attestations, SBOMs, VEX, SARIF, and QA reports.

* [bom v0.8.0](https://github.com/kubernetes-sigs/bom) – General-purpose tool for creating, viewing, and transforming SBOMs, generating SPDX packages from directories, files, and container images with license classification and dependency analysis.