Alternatives and similar repositories for mapi-action

Users that are interested in mapi-action are comparing it to the libraries listed below

• ForAllSecure / mayhem-examples
  Mayhem example templates for programming languages and fuzzers that you love!
  ☆33Updated last year
• ossf / Project-Security-Metrics
  Collect, curate, and communicate relevant security metrics for open source projects.
  ☆63Updated last year
• semgrep / semgrep-action
  This project is deprecated. Use https://github.com/returntocorp/semgrep instead
  ☆73Updated last year
• CycloneDX / gh-python-generate-sbom
  GitHub action to generate a CycloneDX SBOM for Python
  ☆14Updated 4 months ago
• ossf / great-mfa-project
  The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute …
  ☆54Updated 3 years ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆94Updated last year
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆46Updated 2 years ago
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆121Updated 4 months ago
• theupdateframework / tuf-on-ci
  A TUF repository and signing tool
  ☆35Updated this week
• securesauce / precli
  Precaution CLI - command line static application security testing tool
  ☆24Updated this week
• anchore / yardstick
  Compare vulnerability scanners results (to make them better!)
  ☆16Updated last month
• secure-systems-lab / dsse
  A specification for signing methods and formats used by Secure Systems Lab projects.
  ☆78Updated 8 months ago
• usnistgov / swid-tools
  ☆13Updated this week
• sbomify / sbomify
  sbomify is an SBOM management platform.
  ☆24Updated last week
• IQTLabs / pypi-scan
  Scan pypi for typosquatting
  ☆36Updated 2 years ago
• lightswitch05 / node-version-audit
  Audit your Node version for known CVEs and patches
  ☆25Updated this week
• ossf / tac
  Technical Advisory Council
  ☆124Updated last week
• OWASP / packman
  A documentation and tracking project with the goal of making package management systems more secure.
  ☆50Updated 4 years ago
• in-toto / supply-chain-compromises
  ☆22Updated 3 years ago
• package-url / packageurl-python
  Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…
  ☆74Updated last week
• ossf / alpha-omega
  Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
  ☆104Updated 3 weeks ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆144Updated last year
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆28Updated last year
• OSSIndex / vulns
  Report missing advisories and corrections on OSS Index
  ☆17Updated 2 years ago
• ossf / toolbelt
  ☆20Updated last week
• kaakaww / javaspringvulny
  javaspringvulny - a Spring Boot web application built wrong on purpose
  ☆19Updated last month
• fabric8-analytics / cvejob
  A tool which tries to map CVEs from NVD to packages in supported ecosystems (Maven, NPM, PyPI).
  ☆12Updated 2 years ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆199Updated last week
• tholian-network / vulnerabilities
  A vulnerabilities database for fully-automated audits
  ☆15Updated last year
• semgrep / semgrep-docs
  Documentation of Semgrep: a fast, open-source, static analysis tool.
  ☆41Updated this week