ForAllSecure / mapi-actionLinks
🤖 Run a Mayhem for API scan in GitHub Actions
☆24Updated 7 months ago
Alternatives and similar repositories for mapi-action
Users that are interested in mapi-action are comparing it to the libraries listed below
Sorting:
- This project is deprecated. Use https://github.com/returntocorp/semgrep instead☆73Updated last year
- ☆13Updated last week
- Mayhem example templates for programming languages and fuzzers that you love!☆33Updated last year
- Compare vulnerability scanners results (to make them better!)☆16Updated this week
- ☆50Updated 2 weeks ago
- ☆29Updated last week
- ZAP Management Scripts☆23Updated 3 weeks ago
- Documentation of Semgrep: a fast, open-source, static analysis tool.☆41Updated last week
- A place to systematically store software bill of materials (SBOM) documents.☆46Updated 2 years ago
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Updated 2 years ago
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Updated last year
- An auto-scoring capture-the-flag game focusing on TOCTOU vulnerabilities☆20Updated 4 years ago
- Precaution CLI - command line static application security testing tool☆24Updated last week
- A tool which tries to map CVEs from NVD to packages in supported ecosystems (Maven, NPM, PyPI).☆12Updated 2 years ago
- Securing Alice's, Bob's and Carl's software supply chain using in-toto☆93Updated 2 weeks ago
- sbomify is an SBOM management platform.☆24Updated this week
- A specification for signing methods and formats used by Secure Systems Lab projects.☆79Updated 9 months ago
- A draft standard for communicating a cryptographic record of build inputs for software artifacts.☆26Updated 2 months ago
- A TUF repository and signing tool☆37Updated this week
- A community collection of security reviews of open source software components.☆95Updated last year
- Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulner…☆48Updated last week
- javaspringvulny - a Spring Boot web application built wrong on purpose☆19Updated 2 months ago
- A CLI tool to analyze the behavior of your dependencies using listen.dev☆12Updated last week
- Report missing advisories and corrections on OSS Index☆17Updated 2 years ago
- Security scanning & static analysis tool☆94Updated 8 months ago
- Sigstore's Protocol Buffer specifications☆33Updated this week
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆122Updated 5 months ago
- Generate a score for your sbom to understand if it will actually be useful.☆230Updated 10 months ago
- Enrich SBOMs with data from third party services☆176Updated 2 months ago
- ☆29Updated 4 months ago