Alternatives and similar repositories for ossaudit

Users that are interested in ossaudit are comparing it to the libraries listed below

• RedHatProductSecurity / cvss
  CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
  ☆115Updated 5 months ago
• jhermann / dependency-check-py
  Shim to easily install OWASP dependency-check-cli into Python projects
  ☆50Updated 4 years ago
• sonatype-nexus-community / jake
  Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.
  ☆132Updated 7 months ago
• ShiftLeftSecurity / scan-docs
  ☆27Updated 3 years ago
• csaf-tools / CVRF-CSAF-Converter
  A CVRF CSAF Converter, taking care about OASIS specification.
  ☆10Updated 7 months ago
• twu / skjold
  Security audit Python project dependencies against security advisory databases.
  ☆66Updated 5 months ago
• ochronasec / ochrona-cli
  A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs
  ☆51Updated 2 years ago
• Contrast-Security-OSS / DjanGoat
  Python and Django implementation of the OWASP RailsGoat project
  ☆75Updated 3 months ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers…
  ☆134Updated last month
• IQTLabs / pypi-scan
  Scan pypi for typosquatting
  ☆38Updated 2 years ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆96Updated last year
• jordan-wright / ossmalware
  ☆93Updated 3 years ago
• ptdropper / CVE-Scanner-for-your-SW-BOM
  CVE Vulnerability scanner of your software bill of materials (SBOM). ASCII text input.
  ☆17Updated 5 years ago
• sbomtools / apt2sbom
  apt2sbom python package generates SPDX or CycloneDX files from Ubuntu APT and Python packaging information
  ☆25Updated 3 years ago
• cve-search / PyCVESearch
  Python wrapper for the API of cve-search
  ☆127Updated 2 years ago
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆22Updated 2 years ago
• pypa / advisory-database
  Advisory database for Python packages published on pypi.org
  ☆316Updated last week
• RedHatProductSecurity / cvelib
  A Python library and command line interface for CVE Services.
  ☆71Updated 3 months ago
• cve-search / VIA4CVE
  Vulnerability Information Aggregator for CVEs
  ☆124Updated 6 years ago
• cve-search / CveXplore
  CveXplore
  ☆42Updated 4 months ago
• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆226Updated last year
• RiskBasedPrioritization / RiskBasedPrioritization.github.io
  ☆19Updated 6 months ago
• snyk / faker-security
  Python Faker provider for security related data
  ☆41Updated 4 months ago
• cve-search / cpe-guesser
  Tool to guess CPE name based on common software name
  ☆110Updated 4 months ago
• nilp0inter / cpe
  CPE: Common Platform Enumeration for Python
  ☆96Updated 3 months ago
• DevSlop / pixi-crs
  CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.
  ☆15Updated 4 years ago
• Vulnogram / Vulnogram
  Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterp…
  ☆212Updated 2 weeks ago
• jgamblin / CISA_Enrichment
  CISA Known Exploited Vulnerabilities Catalog Enrichment
  ☆18Updated last year
• jpetrucciani / bandit-check
  github action to run the bandit security linter
  ☆15Updated last month
• DefectDojo / defectdojo_api
  Python API library for DefectDojo
  ☆43Updated 2 years ago