Alternatives and similar repositories for sarif-vscode-extension

Users that are interested in sarif-vscode-extension are comparing it to the libraries listed below

• microsoft / sarif-tutorials
  User-friendly documentation for the SARIF file format.
  ☆335Updated 2 years ago
• oasis-tcs / sarif-spec
  OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues
  ☆190Updated last week
• microsoft / sarif-web-component
  A React-based component for viewing SARIF files.
  ☆101Updated last year
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆354Updated last month
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆159Updated last year
• microsoft / sarif-python-om
  Python classes for the SARIF object model
  ☆45Updated last year
• advanced-security / secret-scanning-review-action
  Action to detect if a secret is initially detected in a pull request
  ☆18Updated last week
• microsoft / sarif-tools
  A set of Python command line tools for working with SARIF files produced by code analysis tools
  ☆138Updated 4 months ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆224Updated this week
• microsoft / rest-api-fuzz-testing
  REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and defau…
  ☆265Updated 4 years ago
• JLLeitschuh / bulk-security-pr-generator
  Generate thousands of pull requests to fix widespread security vulnerabilities across GitHub.
  ☆36Updated 8 months ago
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆135Updated last month
• facebook / sapp
  Post Processor for Facebook Static Analysis Tools.
  ☆140Updated this week
• semgrep / semgrep-action
  This project is deprecated. Use https://github.com/returntocorp/semgrep instead
  ☆74Updated last year
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆79Updated last week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆197Updated 7 months ago
• GeekMasher / ghastoolkit
  GitHub Advanced Security Python Toolkit
  ☆14Updated last month
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆381Updated 2 weeks ago
• SAP / project-kb
  Home page of project "KB"
  ☆133Updated 9 months ago
• owenrumney / go-sarif
  Go library for SARIF - Static Analysis Results Interchange Format
  ☆81Updated 2 months ago
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆322Updated 6 months ago
• ossf / alpha-omega
  Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
  ☆111Updated this week
• google / oss-fuzz-vulns
  OSS-Fuzz vulnerabilities for OSV.
  ☆169Updated this week
• bureado / awesome-software-supply-chain-security
  A compilation of resources in the software supply chain security domain, with emphasis on open source
  ☆342Updated 2 years ago
• advanced-security / codeql-workshops-staging
  Original workshops and staging area for new ones
  ☆16Updated 6 months ago
• OWASP / www-project-benchmark
  OWASP Foundation Web Respository
  ☆18Updated last week
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆206Updated 3 months ago
• advanced-security / advanced-security-material
  ☆75Updated last month
• github / codeql-coding-standards
  This repository contains CodeQL queries and libraries which support various Coding Standards.
  ☆182Updated this week
• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆226Updated last year