minefield

minefield

Graphing SBOM's Fast.

Stars: 701

Visit
 screenshot

BitBom Minefield is a tool that uses roaring bit maps to graph Software Bill of Materials (SBOMs) with a focus on speed, air-gapped operation, scalability, and customizability. It is optimized for rapid data processing, operates securely in isolated environments, supports millions of nodes effortlessly, and allows users to extend the project without relying on upstream changes. The tool enables users to manage and explore software dependencies within isolated environments by offline processing and analyzing SBOMs.

README:

BitBom Long Logo

Go Report Card Build and Test

BitBom Minefield uses roaring Bitmaps to graph SBOMs with four main fundamentals:

  • Speed: Optimized for rapid data processing.
  • Air-Gapped: Operates securely in isolated environments.
  • Scalable: Supports millions of nodes effortlessly.
  • Customizable: Allows users to extend the project without relying on upstream changes.

Before moving on, please consider giving us a GitHub star ⭐️. Thank you!


Documentation

For comprehensive guides and detailed documentation, please visit our Docs.


Terminal Output

Caching 10,000 SBOMs packages transitive dependents in 30 seconds.

Table of Contents

  1. Quickstart Guide
  2. Example
  3. To Start Using Minefield
  4. How Minefield Works
  5. Visualization of a Query
  6. Documentation
  7. Blog
  8. Star History
  9. Acknowledgements

View Minefield demo on asciinema

Quickstart Guide

  1. Start the server

    minefield server
  2. Ingest some data:

    minefield ingest sbom <sbom_file or sbom_dir>
  3. Cache the data:

    minefield cache
  4. Run a query:

    minefield query <query_string>

Example

  1. Start the API server:

    minefield server 
  2. Ingest the testdata/small SBOM directory:

    minefield ingest sbom testdata/small
  3. Cache the data:

    minefield cache
  4. Run the leaderboard custom with "dependents library":

    • This command generates a ranked list of packages, ordered by the number of other packages that depend on them.
    minefield leaderboard custom "dependents library"
  5. Run a query on the top value from the leaderboard:

    • This command queries the dependents for a specific package, in this case dep2.
    minefield query custom "dependents library pkg:[email protected]"
  6. Run queries to see the shared dependencies of lib-A and dep1, and lib-A and lib-B:

    • These queries output the intersection of two queries, finding package dependencies shared between each pair.
    minefield query custom "dependencies library pkg:[email protected] and dependencies library pkg:[email protected]"

To Start Using Minefield

Using Docker

docker pull ghcr.io/bitbomdev/minefield:latest
docker run -it ghcr.io/bitbomdev/minefield:latest

Building From Source

git clone https://github.com/bitbomdev/minefield.git
cd minefield
go build -o minefield main.go
./minefield

How Minefield Works

The design decisions and architecture of Minefield can be found here.

Air-Gapped Design Philosophy

Minefield is primarily designed as an air-gapped solution, operating seamlessly without internet connectivity. It makes it ideal for secure environments that require complete isolation from external networks.

  • Offline Operation: All functionalities, including data ingestion, caching, querying, and visualization, are performed locally without external dependencies.

  • Enhanced Security: Operating in an air-gapped environment minimizes the risk of data breaches and unauthorized access, ensuring that sensitive information remains within your controlled infrastructure.

  • Data Sovereignty: Users have complete control over their data, with no external transmissions, adhering to strict compliance and regulatory requirements.

  • Efficiency: Minefield is optimized for performance and can handle large datasets quickly even without network resources.

Minefield makes it easy to securely and efficiently manage and explore your software dependencies within isolated environments by offline processing and analyzing SBOMs (Software Bill of Materials).

Visualization of a Query

Query Visualization

Blog

Stay updated with the latest news and insights by visiting our Blog.

Star History

Star History Chart

Acknowledgements

For Tasks:

Click tags to check more tools for each tasks

For Jobs:

Alternative AI tools for minefield

Similar Open Source Tools

For similar tasks

For similar jobs