Alternatives and similar repositories for sarif-spec:

Users that are interested in sarif-spec are comparing it to the libraries listed below

• microsoft / sarif-vscode-extension
  SARIF Microsoft Visual Studio Code extension
  ☆113Updated 4 months ago
• microsoft / sarif-tutorials
  User-friendly documentation for the SARIF file format.
  ☆293Updated last year
• microsoft / sarif-sdk
  .NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs…
  ☆200Updated this week
• microsoft / sarif-web-component
  A React-based component for viewing SARIF files.
  ☆91Updated 4 months ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆194Updated last week
• ossf / alpha-omega
  Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
  ☆90Updated this week
• CycloneDX / specification
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…
  ☆384Updated last week
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆331Updated 3 weeks ago
• google / deps.dev
  Resources for the deps.dev API
  ☆294Updated this week
• package-url / purl-spec
  A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
  ☆737Updated this week
• github / codeql-coding-standards
  This repository contains CodeQL queries and libraries which support various Coding Standards.
  ☆139Updated this week
• ossf / wg-supply-chain-integrity
  Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …
  ☆179Updated last year
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆141Updated last year
• owenrumney / go-sarif
  Go library for sarif - Static Analysis Results Interchange Format
  ☆72Updated 3 weeks ago
• spdx / spdx-spec
  The System Package Data Exchange (SPDX) specification in Markdown and HTML formats.
  ☆314Updated this week
• ossf / scorecard-action
  Official GitHub Action for OpenSSF Scorecard.
  ☆286Updated this week
• microsoft / codeql-container
  Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.
  ☆114Updated last year
• ossf / wg-securing-software-repos
  OpenSSF Working Group on Securing Software Repositories
  ☆100Updated 4 months ago
• semgrep / semgrep-action
  This project is deprecated. Use https://github.com/returntocorp/semgrep instead
  ☆73Updated 11 months ago
• fasten-project / fasten
  Analyse package dependency networks at the call graph level
  ☆92Updated last year
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆27Updated 9 months ago
• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆276Updated last month
• advanced-security / filter-sarif
  GitHub Action for filtering Code Scanning alerts by path and id
  ☆26Updated 4 months ago
• in-toto / attestation
  in-toto Attestation Framework
  ☆262Updated this week
• github / ossar-action
  Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).
  ☆96Updated 10 months ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆75Updated last month
• package-url / packageurl-python
  Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…
  ☆73Updated 4 months ago
• ossf / sbom-everywhere
  Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
  ☆82Updated this week
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆126Updated last month
• spdx / spdx-3-model
  The model for the information captured in SPDX version 3 standard.
  ☆77Updated this week