microsoft / sarif-js-sdkLinks
JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs/sarif-spec)
☆30Updated last year
Alternatives and similar repositories for sarif-js-sdk
Users that are interested in sarif-js-sdk are comparing it to the libraries listed below
Sorting:
- JS/TS library to easily build valid SARIF output from your javascript based SAST tools☆17Updated this week
- ESLint Plugin focused on common security issues and misconfigurations.☆49Updated 10 months ago
- reference implementation of conventionalcommits.org spec☆51Updated 7 months ago
- Code-signing for npm packages☆175Updated this week
- GitHub Action to combine multiple PRs into a single one☆139Updated 9 months ago
- Collection of security best practices for package managers.☆164Updated 3 years ago
- Find license compliance and security issues in your applications with FOSSA and GitHub Actions.☆63Updated last week
- JavaScript implementation of The Update Framework (TUF)☆82Updated this week
- Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.☆113Updated last week
- creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects☆135Updated last month
- An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.☆56Updated this week
- GitHub action to generate a CycloneDX SBOM for Node.js☆22Updated 5 months ago
- Find stale repositories in a GitHub organization.☆191Updated last week
- SARIF Microsoft Visual Studio Code extension☆127Updated 3 weeks ago
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆98Updated last month
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆40Updated last month
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆217Updated last week
- Official GitHub Action for OpenSSF Scorecard.☆343Updated last week
- ☆74Updated 2 years ago
- OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues☆188Updated 2 weeks ago
- [GitHub] A Command Line ToolKit for GitHub Security Alert.☆28Updated 5 months ago
- ☆55Updated last month
- Orchestrate GitHub Actions Security☆302Updated last week
- ☆140Updated last month
- ☆138Updated this week
- Probot & GitHub Action example☆34Updated this week
- Lock Action to support deployment locking for the branch-deploy Action☆51Updated 3 weeks ago
- CLI to run a octoherd scripts on one or multiple repositories☆102Updated 2 weeks ago
- A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets☆52Updated 3 years ago
- Octokit plugin for GitHub’s recommended request throttling☆123Updated 3 weeks ago