19 results found Sort:
- Filter by Primary Language:
- Go (4)
- Python (3)
- Java (3)
- TypeScript (3)
- JavaScript (1)
- C# (1)
- Scala (1)
- +
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Created
2012-09-03
10,030 commits to main branch, last one 3 days ago
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Created
2013-08-30
937 commits to master branch, last one a day ago
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Created
2013-07-16
5,006 commits to master branch, last one 15 hours ago
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nl...
Created
2015-07-01
11,149 commits to develop branch, last one 20 hours ago
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
Created
2022-03-16
1,319 commits to v3 branch, last one 5 days ago
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTra...
Created
2021-03-16
3,454 commits to master branch, last one about a month ago
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the ...
Created
2021-12-30
951 commits to master branch, last one 23 hours ago
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-...
Created
2017-11-27
1,102 commits to main branch, last one 6 months ago
Scans your project to determine what components you use
Created
2021-11-16
679 commits to main branch, last one 3 days ago
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow:
Created
2016-01-12
625 commits to main branch, last one 7 months ago
A compilation of resources in the software supply chain security domain, with emphasis on open source
sbom
devsecops
attestation
awesome-list
cve-scanning
dependencies
oss-compliance
static-analysis
package-management
reproducible-builds
supply-chain-attacks
dependency-management
software-supply-chain
supply-chain-security
security-vulnerability
vulnerability-scanning
vulnerability-management
software-composition-analysis
software-supply-chain-security
Created
2022-02-20
447 commits to main branch, last one about a year ago
Tool to achieve policy driven vetting of open source dependencies
Created
2022-12-30
338 commits to main branch, last one 8 days ago
A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
Created
2021-05-29
9 commits to main branch, last one about a year ago
ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabas...
Created
2020-09-10
977 commits to main branch, last one 21 hours ago
Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable dependencies are found.
Created
2019-06-29
221 commits to main branch, last one 7 months ago
A light-weight app to audit and inventory large codebases for open source license compliance.
Created
2021-09-21
4,797 commits to main branch, last one 2 days ago
OWASP Dependency Track API client for intergration into CI/CD pipeline
Created
2019-10-11
50 commits to master branch, last one 2 years ago
The SCANOSS SBOM Workbench graphical user interface to scan and audit your source code.
Created
2021-06-10
1,102 commits to main branch, last one a day ago
Sharing software supply chain security open source projects
Created
2022-02-18
18 commits to main branch, last one about a year ago