Alternatives and similar repositories for sarif-spec

Users that are interested in sarif-spec are comparing it to the libraries listed below

• microsoft / sarif-vscode-extension
  SARIF Microsoft Visual Studio Code extension
  ☆132Updated this week
• microsoft / sarif-tutorials
  User-friendly documentation for the SARIF file format.
  ☆336Updated 2 years ago
• microsoft / sarif-sdk
  .NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs…
  ☆209Updated 2 weeks ago
• microsoft / sarif-web-component
  A React-based component for viewing SARIF files.
  ☆101Updated last year
• ossf / alpha-omega
  Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
  ☆111Updated 2 weeks ago
• microsoft / sarif-tools
  A set of Python command line tools for working with SARIF files produced by code analysis tools
  ☆139Updated 4 months ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆227Updated this week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆197Updated 7 months ago
• ossf / scorecard-action
  Official GitHub Action for OpenSSF Scorecard.
  ☆350Updated this week
• microsoft / sarif-python-om
  Python classes for the SARIF object model
  ☆45Updated last year
• semgrep / semgrep-action
  This project is deprecated. Use https://github.com/returntocorp/semgrep instead
  ☆74Updated last year
• CycloneDX / specification
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…
  ☆467Updated this week
• spdx / spdx-spec
  The System Package Data Exchange (SPDX) specification in Markdown and HTML formats.
  ☆350Updated last week
• google / deps.dev
  Resources for the deps.dev API
  ☆374Updated 2 weeks ago
• ossf / wg-supply-chain-integrity
  Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …
  ☆195Updated last week
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆320Updated 6 months ago
• advanced-security / secret-scanning-review-action
  Action to detect if a secret is initially detected in a pull request
  ☆18Updated last week
• in-toto / attestation
  in-toto Attestation Framework
  ☆321Updated this week
• ossf / wg-securing-critical-projects
  Helping allocate resources to secure the critical open source projects we all depend on.
  ☆381Updated 8 months ago
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆355Updated last month
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆208Updated 3 months ago
• github / ossar-action
  Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).
  ☆98Updated 2 months ago
• package-url / purl-spec
  A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
  ☆955Updated this week
• spdx / spdx-examples
  Examples of SPDX files for software combinations
  ☆140Updated 2 months ago
• spdx / spdx-3-model
  The model for the information captured in SPDX version 3 standard.
  ☆98Updated this week
• scanoss / purl2cpe
  PURL to CPE Relationship mapping project.
  ☆107Updated this week
• microsoft / sarif-js-sdk
  JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…
  ☆31Updated last year
• ossf / sbom-everywhere
  Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
  ☆111Updated 2 weeks ago
• ossf / tac
  Technical Advisory Council
  ☆133Updated last week
• github / codeql-coding-standards
  This repository contains CodeQL queries and libraries which support various Coding Standards.
  ☆182Updated this week