CVEProject / cve-documentsLinks
Source for official CVE Program policy documents.
☆16Updated 2 weeks ago
Alternatives and similar repositories for cve-documents
Users that are interested in cve-documents are comparing it to the libraries listed below
Sorting:
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆135Updated 2 months ago
- Exploit Prediction Scoring System (EPSS)☆31Updated 3 years ago
- Decision trees generated via Graphviz to inform pragmatic threat modelling.☆11Updated 5 years ago
- A Python library and command line interface for CVE Services.☆71Updated 3 months ago
- Report missing advisories and corrections on OSS Index☆17Updated 3 years ago
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆206Updated 3 months ago
- Certbot container that stores its configuration in an AWS S3 bucket☆15Updated last week
- Examples of SPDX files for software combinations☆140Updated 2 months ago
- CVE Automation Working Group☆181Updated last week
- OpenSSF Governance and Legal Docs☆74Updated 4 months ago
- OpenSSF Endusers Working Group☆28Updated last year
- A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.☆62Updated 7 months ago
- A generic skeleton project for quickly getting a new cisagov project started.☆18Updated last month
- Central document repository for CVE service design☆20Updated last year
- NIST OSCAL SDK and CLI☆38Updated 5 years ago
- Technical Advisory Council☆134Updated 2 weeks ago
- Risk measurement and management framework☆18Updated 7 months ago
- Global IRT (Incident Response Team) is a project to describe common IRT and abuse contact information☆77Updated 2 years ago
- The CVE.ORG website☆102Updated last week
- A small utility that keeps your Git repositories from leaking secrets, skipping hooks, or quietly drifting out of compliance. It’s design…☆32Updated 2 months ago
- Golang tool to pull and summarize NPM license info☆13Updated 3 years ago
- CVE database☆21Updated 5 years ago
- This repo contains the source for the CVE Services API.☆227Updated this week
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Updated last year
- OSCAL SSP content for technologies shipped by Red Hat☆15Updated 2 years ago
- A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC☆32Updated last year
- The Secure Coding Framework☆22Updated 5 years ago
- Dependency vulnerability auditor for Ruby☆13Updated last year
- ☆137Updated last week
- GSA Security Benchmarks and Tools☆21Updated 6 years ago