Alternatives and similar repositories for hub

Users that are interested in hub are comparing it to the libraries listed below

• blackducksoftware / detect
  Scanning and analysis for Black Duck SCA products.
  ☆190Updated this week
• blackducksoftware / hub-rest-api-python
  HUB REST API Python bindings
  ☆96Updated 2 months ago
• jenkinsci / dependency-check-plugin
  Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
  ☆138Updated last week
• blackducksoftware / blackduck-docker-inspector
  ☆21Updated 3 years ago
• anchore / anchore-cli
  Simple command-line client to the Anchore Engine service
  ☆113Updated last year
• neuvector / kubernetes-cis-benchmark
  A set of scripts inspired by CIS Kubernetes Benchmark that checks best-practices of Kubernetes installations
  ☆266Updated 2 years ago
• stevespringett / nist-data-mirror
  A simple Java command-line utility to mirror the CVE JSON data from NIST.
  ☆214Updated 3 years ago
• aquasecurity / harbor-scanner-trivy
  Use Trivy as a plug-in vulnerability scanner in the Harbor registry
  ☆225Updated last year
• aquasecurity / vuln-list
  NVD, Ubuntu, Alpine
  ☆449Updated this week
• dev-sec / cis-kubernetes-benchmark
  CIS Kubernetes Benchmark - InSpec Profile
  ☆309Updated last year
• OtherDevOpsGene / zap-sonar-plugin
  Integrates OWASP Zed Attack Proxy reports into SonarQube
  ☆73Updated 6 months ago
• CycloneDX / cyclonedx-cli
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
  ☆452Updated last month
• CycloneDX / cyclonedx-core-java
  CycloneDX SBOM Model and Utils for Creating and Validating BOMs
  ☆105Updated this week
• aquasecurity / docker-bench
  Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark
  ☆221Updated last year
• jenkinsci / dependency-track-plugin
  Main repository for the official Dependency-Track Jenkins plugin
  ☆50Updated last week
• aquasecurity / trivy-db
  ☆302Updated this week
• dev-sec / cis-docker-benchmark
  CIS Docker Benchmark - InSpec Profile
  ☆524Updated 2 years ago
• OWASP-Benchmark / BenchmarkJava
  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…
  ☆769Updated this week
• stevespringett / CPE-Parser
  A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIS…
  ☆54Updated last week
• cncf / financial-user-group
  💰💸☁️ For those interested in running Kubernetes in highly regulated environments, particularly financial services
  ☆312Updated 3 years ago
• eclipse-steady / steady
  Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determ…
  ☆541Updated 2 years ago
• DependencyTrack / frontend
  Frontend UI for Dependency-Track
  ☆150Updated this week
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆99Updated last month
• jenkinsci / aqua-microscanner-plugin
  Enables scanning of docker builds in Jenkins for OS package vulnerabilities.
  ☆35Updated 2 years ago
• arminc / clair-local-scan
  Run CoreOs Clair standalone
  ☆254Updated last year
• jeremylong / open-vulnerability-cli
  A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mi…
  ☆159Updated this week
• anchore / ci-tools
  Contains scripts for running anchore engine in CI pipelines
  ☆34Updated 3 years ago
• dependency-check / dependency-check-sonar-plugin
  Integrates Dependency-Check reports into SonarQube
  ☆684Updated 3 months ago
• opensbom-generator / spdx-sbom-generator
  Support CI generation of SBOMs via golang tooling.
  ☆423Updated last year
• k8s-sec / k8s-sec.github.io
  Links and resources for the O'Reilly Kubernetes Security book
  ☆101Updated 5 years ago