Alternatives and similar repositories for software-supply-chain-compromises

Users that are interested in software-supply-chain-compromises are comparing it to the libraries listed below

• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆148Updated last year
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆75Updated 2 months ago
• ossf / package-feeds
  Feed parsing for language package manager updates
  ☆79Updated 7 months ago
• anchore / nvd-data-overrides
  ☆47Updated this week
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆95Updated last year
• CERTCC / SSVC
  Stakeholder-Specific Vulnerability Categorization
  ☆153Updated this week
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆212Updated this week
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆191Updated 3 months ago
• IQTLabs / pypi-scan
  Scan pypi for typosquatting
  ☆37Updated 2 years ago
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆46Updated 2 years ago
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆71Updated 3 weeks ago
• in-toto / supply-chain-compromises
  ☆22Updated 3 years ago
• RogoLabs / cve.icu
  CVE.ICU code.
  ☆43Updated this week
• secmerc / materialize-threats
  ☆66Updated 2 years ago
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆365Updated 7 months ago
• jordan-wright / ossmalware
  ☆93Updated 2 years ago
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆21Updated 2 years ago
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆316Updated this week
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆96Updated 5 months ago
• adamshostack / conflictmodeling
  A place to gather and organize information about using threat modeling frameworks to deal with social conflict in online systems
  ☆56Updated 3 weeks ago
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆215Updated last year
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆71Updated 2 years ago
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆139Updated 3 years ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆148Updated 3 months ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 10 months ago
• spoofzu / jvmxray
  Externalize Java application access to protected resources as log messages.
  ☆42Updated 2 weeks ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆172Updated 7 months ago
• segmentio / threat-modeling-training
  Segment's Threat Modeling training for our engineers
  ☆243Updated 4 years ago
• jgamblin / monthlyCVEStats
  Monthly CVE Stats
  ☆43Updated last week
• CloudSecurityAlliance / gsd-tools
  Global Security Database Tools
  ☆43Updated last year