supply-chain-security commands

sbom-tool/gh-guard

Command

Scan a Rust project and produce a supply chain security gap analysis.

sbom-tool/gh-guard

Command

Generate a single supply chain security config file.

sbom-tool/gh-guard

Command

Verify that generated supply chain configs are valid and functional.

bomly-dev/bomly-cli

Command

Compare dependency state between two points — two Git refs, two SBOM files, or two container image tags — and report what changed. diff runs the scan pipeline against both states, so the same target flags and gates apply to each side.

bomly-dev/bomly-cli

Command

Answer "why is this package here?" — trace every dependency path that pulls a package into the graph. explain runs the same detect and match stages as scan, then walks the graph from the project roots to the package you named.

bomly-dev/bomly-cli

Command

Resolve a target's dependencies into one consolidated graph, then optionally enrich, analyze, audit, and render it. scan is the pipeline every other graph command builds on — flags you learn here work the same way on explain and diff.

tiagosilva07/zyrax-guard

Command Claude Code

Tech-lead planning pass — clarify, decide, and route work to specialist agents before building.