DependencyTrack / dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
☆2,704Updated this week
Related projects ⓘ
Alternatives and complementary repositories for dependency-track
- Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package manager…☆583Updated this week
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆808Updated last year
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆6,259Updated this week
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,095Updated this week
- DevSecOps, ASPM, Vulnerability Management. All on one platform.☆3,731Updated this week
- Integrates Dependency-Check reports into SonarQube☆602Updated 2 weeks ago
- Agile Threat Modeling Toolkit☆620Updated this week
- A service that analyzes docker images and scans for vulnerabilities☆1,587Updated last year
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆515Updated this week
- Open source vulnerability DB and triage service.☆1,540Updated this week
- Supply-chain Levels for Software Artifacts☆1,555Updated this week
- OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for …☆1,019Updated this week
- OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependen…☆6,450Updated this week
- An open source threat modeling tool from OWASP☆933Updated last week
- CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.☆314Updated 3 weeks ago
- secureCodeBox (SCB) - continuous secure delivery out of the box☆784Updated this week
- ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.☆2,295Updated last month
- Frontend UI for Dependency-Track☆106Updated this week
- A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles☆484Updated last week
- A vulnerability scanner for container images and filesystems☆8,838Updated this week
- 🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!☆2,088Updated last week
- OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…☆670Updated 4 months ago
- Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects☆298Updated last week
- OpenClarity is an open source tool built to enhance security and observability of cloud native applications and infrastructure☆1,350Updated this week
- OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…☆365Updated this week
- ☆494Updated this week
- Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan☆818Updated this week
- OpenSSF Scorecard - Security health metrics for Open Source☆4,604Updated this week
- Support CI generation of SBOMs via golang tooling.☆407Updated 10 months ago
- Hunt for security weaknesses in Kubernetes clusters☆4,764Updated 8 months ago