SOOS Community Edition is a free, cloud-based Software Composition Analysis (SCA) solution designed for maintainers and developers working with public GitHub repositories. It enables users to scan their projects for open source vulnerabilities and license issues, manage Software Bill of Materials (SBOM), and automate ticket creation for identified problems. The platform integrates directly with GitHub, requiring no approval or setup fees, and is intended to make practical supply chain security accessible to the open source community. SOOS Community Edition provides essential SCA features at no cost, helping users reduce risk and maintain compliance in their open source projects.

Key Features

Free SCA for Public GitHub Repositories Scan public repositories for vulnerabilities and license issues.

• No cost for maintainers and open source projects.
• Easy GitHub integration for quick setup.

SBOM Management Automatically generate and manage Software Bill of Materials.

• Track all dependencies and components in your project.
• Supports compliance and transparency requirements.

Automated Ticket Creation Create tickets for vulnerabilities and license issues.

• Streamlines remediation workflow.
• Reduces manual tracking effort.

No Approval or Setup Fees Instant access for open source maintainers.

• No approval process required—just sign up.
• No entry-level or setup fees.

Benefits

Accessible Open Source Security Brings practical supply chain security to the open source community.

• Free for public GitHub repositories.
• Lowers the barrier to entry for SCA adoption.

Improved Compliance and Transparency Automates SBOM management and license tracking.

• Helps maintainers meet compliance requirements.
• Increases visibility into project dependencies.

Streamlined Remediation Automated ticket creation for issues.

• Accelerates vulnerability and license issue resolution.
• Reduces manual workload for maintainers.