microsoft / bandit-sarif-formatterLinks
A report formatter for Bandit (a Python security analyzer) that produces output in the SARIF format.
☆20Updated 2 years ago
Alternatives and similar repositories for bandit-sarif-formatter
Users that are interested in bandit-sarif-formatter are comparing it to the libraries listed below
Sorting:
- Functionality and DataModels of OWASP CycloneDX for Python☆102Updated last week
- Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX …☆72Updated 6 months ago
- A Python library to parse, validate and create SPDX documents.☆231Updated 2 weeks ago
- Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…☆86Updated 2 months ago
- A tool to generate a SBOM (Software Bill of Materials) for an installed Python module☆37Updated 3 weeks ago
- Python classes for the SARIF object model☆45Updated last year
- Library to ingest and generate SBOMs☆36Updated last week
- Advisory database for Python packages published on pypi.org☆317Updated 2 weeks ago
- OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues☆190Updated 2 weeks ago
- Audit python packages for known vulnerabilities☆34Updated 3 years ago
- Put the power of CodeQL in your pocket, take it with you to any CI 🚀☆12Updated 2 years ago
- Grab some/all of CodeQL CLI binary, QL library, VSCode starter workspace, VSCode and VSCode QL extension☆11Updated 7 months ago
- A Python library and command line interface for CVE Services.☆71Updated 4 months ago
- SARIF Microsoft Visual Studio Code extension☆132Updated last week
- CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments☆356Updated this week
- Low-effort reachability analysis for third-party code vulnerabilities.☆22Updated 2 years ago
- Software Bill-of-Materials documents for Python packages☆45Updated 11 months ago
- Security audit Python project dependencies against security advisory databases.☆66Updated 5 months ago
- CVSS2/3/4 library with interactive calculator for Python 2 and Python 3☆116Updated 6 months ago
- A React-based component for viewing SARIF files.☆102Updated last year
- GitHub Action for filtering Code Scanning alerts by path and id☆37Updated last year
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆66Updated last year
- OWASP Foundation Web Respository☆19Updated 3 weeks ago
- Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions…☆38Updated this week
- Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents☆24Updated last year
- Service to scan licenses from source code☆12Updated 2 years ago
- Open Source Vulnerability schema.☆229Updated this week
- Create a dependency graph of the components within a SBOM☆17Updated 5 months ago
- PURL to CPE Relationship mapping project.☆109Updated this week
- Software Component Verification Standard (SCVS)☆153Updated 10 months ago