A documentation and tracking project with the goal of making package management systems more secure.
☆52Mar 5, 2021Updated 5 years ago
Alternatives and similar repositories for packman
Users that are interested in packman are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Nov 13, 2023Updated 2 years ago
- Creates CycloneDX Software Bill-of-Materials (SBOM) from Objective-C and Swift projects that use CocoaPods.☆24Jul 6, 2025Updated last year
- Public website cyclonedx.org☆12Dec 20, 2024Updated last year
- Software Component Verification Standard (SCVS)☆168Apr 1, 2025Updated last year
- StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…☆54Mar 4, 2026Updated 6 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- GitHub action to generate a CycloneDX SBOM for .NET☆13Jul 15, 2025Updated last year
- Threat Modeling Manifesto☆31May 28, 2026Updated 3 months ago
- Provides content useful for IriusRisk threat modelling, including templates, API scripts, libraries and more.☆17Apr 20, 2026Updated 4 months ago
- Report missing advisories and corrections on OSS Index☆18Jan 19, 2023Updated 3 years ago
- WOSI - Women of Open Source Israel 🇮🇱☆19May 18, 2026Updated 4 months ago
- Manage a uniform team of security managers for every organization in your enterprise☆24Aug 11, 2026Updated last month
- Externalize Java application access to protected resources as log messages.☆47Jul 15, 2026Updated 2 months ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆110Jan 16, 2024Updated 2 years ago
- This is a POC repository showing how a Kubernetes Admission Controller can be made irrelevant when verifying container image signatures☆12Dec 21, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆26Sep 17, 2023Updated 3 years ago
- OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…☆551Updated this week
- ☆41Jul 9, 2020Updated 6 years ago
- GitHub Action adding a comment with information about new npm dependencies detected in a pull request☆18Jun 22, 2026Updated 2 months ago
- stage1 bootstrap for wolfi☆11Sep 9, 2023Updated 3 years ago
- OWASP Foundation Web Respository☆23Jun 2, 2026Updated 3 months ago
- AWS container security survey 2020☆11Dec 2, 2020Updated 5 years ago
- Library supporting secure keys, and crypto enabled JSON and CBOR☆18Jul 18, 2026Updated 2 months ago
- Swag for the OWASP projects and chapters☆45May 22, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A runbook for the PSF, for TUF key setup and initial signing operations to bootstrap signing for PyPI.☆17May 29, 2026Updated 3 months ago
- OpenSSF Project Template☆23Jun 5, 2026Updated 3 months ago
- Secure Coding in Python☆22Oct 11, 2024Updated last year
- Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple…☆25Dec 16, 2022Updated 3 years ago
- SLSA implementation of Community Specification governance☆28Aug 11, 2026Updated last month
- Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.☆30Updated this week
- Kubernetes Security Testing Guide☆28Apr 22, 2024Updated 2 years ago
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆35Apr 4, 2023Updated 3 years ago
- This projects provides a logger and a connected harlem shake js.☆20Mar 24, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Erlang Sandboxing for Reliable and Scalable Concurrency Testing☆25Nov 28, 2019Updated 6 years ago
- Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0☆41Dec 8, 2022Updated 3 years ago
- Burp Extension for copying requests safely. It redacts headers like Cookie, Authorization and X-CSRF-Token for now. More support can be a…☆20May 17, 2020Updated 6 years ago
- Erlang app for testing authoritative DNS servers for compliance.☆30Updated this week
- A standard API specification for exchanging supply chain artifacts and intelligence☆114Updated this week
- Content for OWASP Summit 2017 site☆129Nov 12, 2020Updated 5 years ago
- A Continuous Threat Modeling methodology☆330Jun 24, 2022Updated 4 years ago