google / osv-scalibrLinks
OSV-SCALIBR: A library for Software Composition Analysis
☆529Updated last week
Alternatives and similar repositories for osv-scalibr
Users that are interested in osv-scalibr are comparing it to the libraries listed below
Sorting:
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆396Updated this week
- A universal SBOM representation in protocol buffers☆307Updated this week
- Enrich SBOMs with data from third party services☆197Updated 2 months ago
- boostsecurityio/poutine☆344Updated 2 weeks ago
- OpenVEX Specification☆161Updated 5 months ago
- Resources for the deps.dev API☆352Updated this week
- Format agnostic SBOM tooling☆121Updated this week
- Open Source Vulnerability schema.☆215Updated 2 weeks ago
- ☆115Updated this week
- Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system…☆342Updated 3 weeks ago
- ☆100Updated 9 months ago
- Generate a score for your sbom to understand if it will actually be useful.☆234Updated last year
- Software Supply Chain Security Platform☆358Updated this week
- A tool to create, transform and attest VEX metadata☆164Updated 2 weeks ago
- Runtime Security Solution for your CI/CD Pipeline☆111Updated 5 months ago
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆590Updated 7 months ago
- kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …☆122Updated last month
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆104Updated this week
- Utility that provides an API platform for validating, querying and managing BOM data☆122Updated last month
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆246Updated 3 weeks ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆138Updated last year
- The security workflow engine!☆129Updated 3 weeks ago
- Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD …☆176Updated last week
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆207Updated 3 weeks ago
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆215Updated 5 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆90Updated 2 weeks ago
- A security layer for Git repositories☆556Updated this week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆502Updated last week
- Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages☆173Updated this week
- Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git☆137Updated this week