LLNL / SurfactantLinks
Modular framework for file information extraction and dependency analysis to generate accurate SBOMs
☆31Updated this week
Alternatives and similar repositories for Surfactant
Users that are interested in Surfactant are comparing it to the libraries listed below
Sorting:
- A Golang library for interacting with the EPSS (Exploit Prediction Scoring System).☆28Updated 3 months ago
- ☆28Updated 4 months ago
- Automated vulnerability discovery and annotation☆67Updated 10 months ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆65Updated this week
- Code Pathfinder, the open-source alternative to GitHub CodeQL built with GoLang. Built for advanced structural search, derive insights, f…☆60Updated this week
- A community collection of security reviews of open source software components.☆94Updated last year
- Fork Threat Modeling Platform - Community☆20Updated last month
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆68Updated 3 weeks ago
- ☆72Updated 3 weeks ago
- A Python client for the Global CVE Allocation System.☆13Updated last week
- Trail of Bits Testing Handbook☆74Updated last week
- Maturity Model Collaborative project☆15Updated 2 years ago
- A project to visualize the software supply chain☆52Updated last year
- ☆10Updated 3 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆46Updated 2 years ago
- Scan pypi for typosquatting☆36Updated 2 years ago
- CVE querying library and utility that uses a local store syncing directly to the National Vulnerability Database☆22Updated last year
- CITL's static analysis engine for native code artifacts☆20Updated 4 years ago
- DEbian Cve REproducer Tool☆24Updated last year
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆39Updated 5 months ago
- Posture Attribute Collection and Evaluation☆23Updated last year
- MSR Project Freta☆78Updated 10 months ago
- Static malware analysis using python☆12Updated 6 years ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆65Updated 11 months ago
- Coverage-Guided Greybox Distributed Fuzzer☆131Updated last month
- DefectDojo Community Content☆18Updated 7 months ago
- A security-first linter for code that shouldn't need linting☆16Updated last year
- CVE.ICU code.☆42Updated this week
- Global Security Database Tools☆42Updated last year
- Automatically scan new pypi packages for potentially malicious code☆30Updated last year