Alternatives and similar repositories for hub

Users that are interested in hub are comparing it to the libraries listed below

• blackducksoftware / detect
  Scanning and analysis for Black Duck SCA products.
  ☆185Updated this week
• blackducksoftware / hub-rest-api-python
  HUB REST API Python bindings
  ☆95Updated 2 months ago
• stevespringett / nist-data-mirror
  A simple Java command-line utility to mirror the CVE JSON data from NIST.
  ☆210Updated 2 years ago
• jenkinsci / dependency-check-plugin
  Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
  ☆138Updated 3 weeks ago
• blackducksoftware / blackduck-docker-inspector
  ☆21Updated 3 years ago
• aquasecurity / trivy-db
  ☆281Updated 3 weeks ago
• anchore / anchore-cli
  Simple command-line client to the Anchore Engine service
  ☆113Updated last year
• DependencyTrack / frontend
  Frontend UI for Dependency-Track
  ☆131Updated last week
• jenkinsci / dependency-track-plugin
  Main repository for the official Dependency-Track Jenkins plugin
  ☆50Updated last week
• aquasecurity / vuln-list
  NVD, Ubuntu, Alpine
  ☆442Updated this week
• aquasecurity / harbor-scanner-trivy
  Use Trivy as a plug-in vulnerability scanner in the Harbor registry
  ☆225Updated last year
• jenkinsci / aqua-microscanner-plugin
  Enables scanning of docker builds in Jenkins for OS package vulnerabilities.
  ☆35Updated 2 years ago
• CycloneDX / cyclonedx-cli
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
  ☆420Updated last week
• dev-sec / cis-docker-benchmark
  CIS Docker Benchmark - InSpec Profile
  ☆520Updated 2 years ago
• neuvector / kubernetes-cis-benchmark
  A set of scripts inspired by CIS Kubernetes Benchmark that checks best-practices of Kubernetes installations
  ☆266Updated 2 years ago
• OtherDevOpsGene / zap-sonar-plugin
  Integrates OWASP Zed Attack Proxy reports into SonarQube
  ☆72Updated 3 months ago
• CycloneDX / cyclonedx-core-java
  CycloneDX SBOM Model and Utils for Creating and Validating BOMs
  ☆96Updated last week
• stevespringett / CPE-Parser
  A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIS…
  ☆53Updated last week
• dev-sec / cis-kubernetes-benchmark
  CIS Kubernetes Benchmark - InSpec Profile
  ☆306Updated last year
• dependency-check / dependency-check-sonar-plugin
  Integrates Dependency-Check reports into SonarQube
  ☆669Updated last week
• anchore / ci-tools
  Contains scripts for running anchore engine in CI pipelines
  ☆34Updated 3 years ago
• joelee2012 / claircli
  Command line tool to interact with Quay Clair
  ☆16Updated 2 years ago
• ossf / s2c2f
  The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…
  ☆216Updated 5 months ago
• anchore / harbor-scanner-adapter
  Harbor Scanner Adapter for Anchore Engine and Enterprise
  ☆39Updated this week
• docker / sbom-cli-plugin
  Plugin for Docker CLI to support SBOM creation using Syft
  ☆157Updated 2 months ago
• k8s-sec / k8s-sec.github.io
  Links and resources for the O'Reilly Kubernetes Security book
  ☆100Updated 4 years ago
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,590Updated 2 years ago
• opensbom-generator / spdx-sbom-generator
  Support CI generation of SBOMs via golang tooling.
  ☆423Updated 9 months ago
• goharbor / harbor-scanner-clair
  Use Clair as a plug-in vulnerability scanner in the Harbor registry
  ☆35Updated last year
• arminc / clair-local-scan
  Run CoreOs Clair standalone
  ☆252Updated 9 months ago