22 results found Sort:
- Filter by Primary Language:
- Python (5)
- Go (4)
- Java (3)
- TypeScript (3)
- JavaScript (2)
- Scala (1)
- C# (1)
- +
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Created
2012-09-03
10,342 commits to main branch, last one a day ago
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Created
2013-08-30
1,000 commits to master branch, last one 9 days ago
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Created
2013-07-16
5,682 commits to master branch, last one 2 days ago
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nl...
Created
2015-07-01
11,326 commits to develop branch, last one 16 days ago
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
Created
2022-03-16
1,449 commits to v3 branch, last one 2 days ago
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTra...
Created
2021-03-16
3,454 commits to master branch, last one 7 months ago
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the ...
Created
2021-12-30
990 commits to master branch, last one 2 months ago
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-...
Created
2017-11-27
1,102 commits to main branch, last one about a year ago
Scans your project to determine what components you use
Created
2021-11-16
747 commits to main branch, last one 2 days ago
A compilation of resources in the software supply chain security domain, with emphasis on open source
sbom
devsecops
attestation
awesome-list
cve-scanning
dependencies
oss-compliance
static-analysis
package-management
reproducible-builds
supply-chain-attacks
dependency-management
software-supply-chain
supply-chain-security
security-vulnerability
vulnerability-scanning
vulnerability-management
software-composition-analysis
software-supply-chain-security
Created
2022-02-20
447 commits to main branch, last one about a year ago
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow:
Created
2016-01-12
625 commits to main branch, last one about a year ago
Tool to achieve policy driven vetting of open source dependencies
Created
2022-12-30
493 commits to main branch, last one 2 days ago
ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabas...
Created
2020-09-10
1,063 commits to main branch, last one 3 days ago
A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
Created
2021-05-29
14 commits to main branch, last one 25 days ago
Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable dependencies are found.
Created
2019-06-29
235 commits to main branch, last one 7 days ago
A light-weight app to audit and inventory large codebases for open source license compliance.
Created
2021-09-21
5,247 commits to main branch, last one a day ago
♾️ Collection of DevSecOps Notes + Resources + Courses + Tools
Created
2023-11-14
113 commits to main branch, last one 19 days ago
OWASP Dependency Track API client for intergration into CI/CD pipeline
Created
2019-10-11
50 commits to master branch, last one 2 years ago
The SCANOSS SBOM Workbench graphical user interface to scan and audit your source code.
Created
2021-06-10
1,148 commits to main branch, last one 24 days ago
Sharing software supply chain security open source projects
Created
2022-02-18
18 commits to main branch, last one 2 years ago
Damn Vulnerable SCA Application
Created
2024-02-09
94 commits to main branch, last one 3 months ago
Modular framework for file information extraction and dependency analysis to generate accurate SBOMs
Created
2023-06-27
505 commits to main branch, last one a day ago