Alternatives and similar repositories for ossf-cve-benchmark

Users that are interested in ossf-cve-benchmark are comparing it to the libraries listed below

• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆129Updated 3 years ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆79Updated this week
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆96Updated last year
• spoofzu / jvmxray
  Externalize Java application access to protected resources as log messages.
  ☆43Updated 2 months ago
• iosifache / semgrep-rules-manager
  Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂
  ☆94Updated 2 weeks ago
• OWASP / cwe-tool
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
  ☆62Updated 7 months ago
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆381Updated 2 weeks ago
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆354Updated last month
• SAP / project-kb
  Home page of project "KB"
  ☆132Updated 9 months ago
• semgrep-old / rules-owasp-asvs
  Semgrep rules corresponding to the OWASP ASVS standard
  ☆27Updated 5 years ago
• ajinabraham / libsast
  Generic SAST Library
  ☆134Updated 6 months ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers…
  ☆134Updated 3 weeks ago
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆159Updated 2 months ago
• microsoft / codeql-container
  Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.
  ☆123Updated 2 years ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆290Updated this week
• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆226Updated last year
• srcclr / efda
  Evaluation Framework for Dependency Analysis (EFDA)
  ☆44Updated 3 years ago
• AppThreat / atom
  atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
  ☆81Updated this week
• microsoft / sarif-vscode-extension
  SARIF Microsoft Visual Studio Code extension
  ☆130Updated last week
• bureado / awesome-software-supply-chain-security
  A compilation of resources in the software supply chain security domain, with emphasis on open source
  ☆341Updated 2 years ago
• planetlevel / jot
  Java Observability Toolkit
  ☆62Updated last year
• purs3lab / Argus
  ☆52Updated last year
• google / oss-fuzz-vulns
  OSS-Fuzz vulnerabilities for OSV.
  ☆168Updated last week
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆221Updated 2 weeks ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆153Updated 9 months ago
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆22Updated 2 years ago
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆96Updated 11 months ago
• cristianstaicu / SecBench.js
  ☆36Updated last year
• OWASP / IoT-Security-Verification-Standard-ISVS
  OWASP IoT Security Verification Standard (ISVS)
  ☆148Updated 3 months ago
• JLLeitschuh / bulk-security-pr-generator
  Generate thousands of pull requests to fix widespread security vulnerabilities across GitHub.
  ☆36Updated 8 months ago