microsoft / sarif-js-sdkLinks
JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs/sarif-spec)
☆28Updated last year
Alternatives and similar repositories for sarif-js-sdk
Users that are interested in sarif-js-sdk are comparing it to the libraries listed below
Sorting:
- JS/TS library to easily build valid SARIF output from your javascript based SAST tools☆13Updated this week
- ESLint Plugin focused on common security issues and misconfigurations.☆43Updated 4 months ago
- JavaScript implementation of The Update Framework (TUF)☆80Updated last week
- reference implementation of conventionalcommits.org spec☆50Updated last month
- [GitHub] A Command Line ToolKit for GitHub Security Alert.☆27Updated 7 months ago
- Code-signing for npm packages☆165Updated this week
- GitHub Action to combine multiple PRs into a single one☆130Updated 3 months ago
- Lock Action to support deployment locking for the branch-deploy Action☆45Updated last week
- Find license compliance and security issues in your applications with FOSSA and GitHub Actions.☆53Updated this week
- GitHub Action to expose GitHub runtime to the workflow☆74Updated last month
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆97Updated last year
- Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.☆92Updated last week
- Find stale repositories in a GitHub organization.☆184Updated this week
- Octokit plugin for GitHub’s recommended request retries☆48Updated 2 weeks ago
- Probot & GitHub Action example☆34Updated this week
- ☆50Updated last week
- CLI to run a octoherd scripts on one or multiple repositories☆104Updated last week
- ☆46Updated 10 months ago
- 🛠️ Get/set persisted configuration using YAML/JSON files in repositories☆40Updated last month
- Lint and format markdown code with remark☆60Updated 8 months ago
- A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets☆51Updated 3 years ago
- WinterCG changes to the WHATWG Fetch standard☆25Updated 7 months ago
- The goal of the Package Metadata Interoperability Collab Space is to improve how JavaScript developers define their packages across the e…☆36Updated last week
- ESLint plugin that validates data using JSON Schema Validator.☆80Updated last week
- OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues☆186Updated last week
- ☆133Updated 3 weeks ago
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆35Updated last month
- Collection of security best practices for package managers.☆162Updated 2 years ago
- An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.☆38Updated this week
- Library to check if a package is reproducible☆54Updated 3 months ago