Kunnus Scanner generates SBOMs for the Cyber Resilience Act and is open source under Apache 2.0. It analyses source trees, operating system and firmware file systems and container images, and covers more than 30 ecosystems, including embedded toolchains such as Zephyr, ESP-IDF, PlatformIO, CMake and Conan. Output is CycloneDX 1.6. It runs locally on Windows, Linux and macOS without an account, and via Docker in CI pipelines such as GitHub Actions.