From 098a85c44efc4f541ac4b09b6254062fb92764eb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Haksung=20Jang=20=28=EC=9E=A5=ED=95=99=EC=84=B1=29?= Date: Wed, 22 Jul 2026 06:14:57 +0900 Subject: [PATCH] Add BomLens to Image Scanning & SBOM (#1481) * Add BomLens to Image Scanning & SBOM Signed-off-by: Haksung Jang * docs: point BomLens link to renamed repo sktelecom/bomlens The repository was renamed from sktelecom/sbom-tools to sktelecom/bomlens. --------- Signed-off-by: Haksung Jang --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index c77bdd3..0405e62 100644 --- a/README.md +++ b/README.md @@ -200,6 +200,7 @@ Image vulnerability scanners, SBOM generators, and digest pinning tools. Commerc - [Anchor](https://github.com/SongStitch/anchor/) - A tool to ensure reproducible builds by pinning dependencies inside your Dockerfiles. - [Anchor Enterprise](https://anchore.com/) - :yen: Analyze images for CVE vulnerabilities and against custom security policies. +- [BomLens](https://github.com/sktelecom/bomlens) - Scan container images (plus source, binaries, and firmware) into CycloneDX SBOMs with vulnerability, license, and notice reports. Ships as a single Docker image with a web UI. - [Clair](https://github.com/quay/clair) - Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers. - [Docker Scout](https://github.com/docker/scout-cli) - Official Docker CLI for SBOM generation, vulnerability analysis, and policy evaluation. - [Grype](https://github.com/anchore/grype) - A vulnerability scanner for container images, filesystems and SBOMs.