Alternatives and similar repositories for CVRF-CSAF-Converter

Users that are interested in CVRF-CSAF-Converter are comparing it to the libraries listed below

• sbomtools / apt2sbom
  apt2sbom python package generates SPDX or CycloneDX files from Ubuntu APT and Python packaging information
  ☆25Updated 3 years ago
• secvisogram / secvisogram
  Secvisogram is a web tool for creating and editing security advisories in the CSAF 2.0 format
  ☆40Updated last month
• philips-software / license-scanner
  Service to scan licenses from source code
  ☆12Updated 2 years ago
• BSI-Bund / secvisogram
  Secvisogram is a web tool for creating and editing security advisories in the CSAF 2.0 format
  ☆28Updated 2 months ago
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆22Updated 2 years ago
• opencybersecurityalliance / PACE
  Posture Attribute Collection and Evaluation
  ☆23Updated 2 years ago
• gocsaf / csaf
  Tools to download or provide CSAF (Common Security Advisory Framework) documents.
  ☆56Updated last month
• interlynk-io / sbomgr
  SBOM Search - Context aware search in SBOM repositories
  ☆29Updated last month
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆50Updated 2 years ago
• OSSIndex / vulns
  Report missing advisories and corrections on OSS Index
  ☆17Updated 3 years ago
• RedHatProductSecurity / advisory-parser
  A library for parsing security advisories
  ☆13Updated 6 months ago
• FIRSTdotorg / epss
  Exploit Prediction Scoring System (EPSS)
  ☆31Updated 3 years ago
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆88Updated 2 weeks ago
• RedHatProductSecurity / cvelib
  A Python library and command line interface for CVE Services.
  ☆71Updated 3 months ago
• ossf / Project-Security-Metrics
  Collect, curate, and communicate relevant security metrics for open source projects.
  ☆63Updated last year
• swagitda / security-decision-trees-graphviz
  Decision trees generated via Graphviz to inform pragmatic threat modelling.
  ☆11Updated 5 years ago
• nyph-infosec / daggerboard
  ☆102Updated last year
• madpah / vexy
  Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents
  ☆24Updated last year
• anchore / nvd-data-overrides
  ☆48Updated this week
• docker-archive / oscalkit
  NIST OSCAL SDK and CLI
  ☆38Updated 5 years ago
• CloudSecurityAlliance / gsd-tools
  Global Security Database Tools
  ☆43Updated 2 years ago
• ossf / security-insights
  Machine-readable specification for the attestation of security-relevant data.
  ☆71Updated 2 weeks ago
• interlynk-io / sbomex
  SBOM Explorer - Discover and pull public SBOMs
  ☆20Updated 7 months ago
• usnistgov / swid-tools
  ☆15Updated this week
• opencybersecurityalliance / firepit
  Firepit - STIX Columnar Storage
  ☆17Updated last year
• interlynk-io / sbomasm
  sbomasm: The Complete SBOM Management Toolkit
  ☆100Updated last week
• CycloneDX / sbom-utility
  Utility that provides an API platform for validating, querying and managing BOM data
  ☆124Updated 2 weeks ago
• D4-project / architecture
  Architecture - design and implementation of the D4 project architecture
  ☆16Updated 6 months ago
• illikainen / ossaudit
  Audit python packages for known vulnerabilities
  ☆34Updated 3 years ago
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆206Updated 3 months ago