From a8607bd178574f9b654fe9a417fc6fea50872edd Mon Sep 17 00:00:00 2001 From: Michael Jaeger Date: Tue, 9 Nov 2021 16:07:50 +0000 Subject: [PATCH] update / correct the sw360 entry. --- handbook/content/52_activity_23.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/handbook/content/52_activity_23.md b/handbook/content/52_activity_23.md index 188fb40..d987e02 100644 --- a/handbook/content/52_activity_23.md +++ b/handbook/content/52_activity_23.md @@ -36,7 +36,7 @@ The following **verification points** demonstrate progress in this activity: * [OWASP Dependency check](https://github.com/jeremylong/DependencyCheck): dependency-Check is a Software Composition Analysis (SCA) tool that attempts to detect publicly disclosed vulnerabilities contained within a project’s dependencies. * [OSS Review Toolkit](https://oss-review-toolkit.org/): a suite of tools to assist with reviewing Open Source Software dependencies. * [Fossa](https://github.com/fossas/fossa-cli): fast, portable and reliable dependency analysis. Supports licence & vulnerability scanning. Language-agnostic; integrates with 20+ build systems. -* [Software 360](https://projects.eclipse.org/projects/technology.sw360). +* [Eclipse SW360](https://projects.eclipse.org/projects/technology.sw360) and their [Github repo](https://github.com/eclipse/sw360). A software catalogue for managing SBOM. * [Eclipse Dash licence tool](https://github.com/eclipse/dash-licences): takes a list of dependencies and requests [ClearlyDefined](https://clearlydefined.io) to check their licences. -- GitLab