OWASP / SideKEK
SideKEK library - inexpensive means to protect cryptographic master keys (key encryption keys, KEKs) in a way that is resistant to some of the most common remote file exfiltration attacks
☆23Updated 4 years ago
Related projects: ⓘ
- Java library which implements the Java object model for SPDX and provides useful helper functions☆35Updated last week
- The ultimate Java library for Troy Hunt's ';-- Have I Been Pwned (v3).☆13Updated last year
- WS-Federation implementation for keycloak☆37Updated 3 years ago
- An opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies☆61Updated this week
- SPDX Command Line Tools using the Spdx-Java-Library☆59Updated last week
- sigstore maven plugin☆18Updated last month
- A Java library for calculating CVSSv2 and CVSSv3 scores and vectors☆36Updated this week
- Plugin for supporting SPDX in a Maven build.☆44Updated 3 weeks ago
- The SonarQube plugin for jQAssistant☆12Updated this week
- OpenControl Database☆11Updated last year
- Lockheed Martin developed utility to compare two CycloneDX SBOMs☆18Updated 2 years ago
- ☆110Updated 3 months ago
- Zanzibar style fine grained authorization☆17Updated this week
- D&D monster fighting + micrometer metrics☆34Updated last month
- Use ORT in your GitLab pipelines☆13Updated 2 months ago
- ☆69Updated this week
- Official repository for the Open Vulnerability and Assessment Language☆33Updated 4 months ago
- Report missing advisories and corrections on OSS Index☆17Updated last year
- The Auditree framework tool to run compliance control checks as unit tests.☆59Updated last month
- Utility that converts SBOM documents from CycloneDX to SPDX☆29Updated 8 months ago
- Apache Maven core ITs☆30Updated last week
- java clients for sigstore☆37Updated last week
- Repository for development of IDQL Policy Language☆11Updated 3 months ago
- ☆9Updated 10 months ago
- Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning …☆41Updated 3 months ago
- Java tools and libraries providing a Metaschema toolchain☆11Updated last month
- AuthzForce Server (Multi-tenant XACML PDP/PAP - REST API)☆56Updated 3 months ago
- A taxonomy of all official CycloneDX property namespaces and names☆14Updated 3 weeks ago
- A simple Java command-line utility to mirror the entire contents of VulnDB.☆42Updated 3 weeks ago
- Project collecting release metadata of various JDK distributions.☆32Updated this week