The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebases using a variety of static analysis security testing (SAST) tools and generate reports to evaluate those tools.
☆174Mar 12, 2024Updated 2 years ago
Alternatives and similar repositories for ossf-cve-benchmark
Users that are interested in ossf-cve-benchmark are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11Jun 8, 2021Updated 5 years ago
- Present ZAProxy results in GitHub Advanced Security☆17May 24, 2024Updated 2 years ago
- GH CLI CodeQL Scan Extension☆21Sep 4, 2025Updated last year
- GitHub Action for filtering Code Scanning alerts by path and id☆35Jul 22, 2026Updated 3 months ago
- A GitHub CLI extension for interacting with Code Scanning analyses and SARIF files☆14Dec 8, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A tool for analyzing the attack surface of an application☆19Mar 5, 2025Updated last year
- Original workshops and staging area for new ones☆16Jul 3, 2025Updated last year
- This is a mapping of CPEs to package urls created by using VulnerableCode's data☆10Aug 14, 2020Updated 6 years ago
- Integrate CodeQL into CI/CD pipelines, using the CodeQL CLI Bundle for Automated Code Scanning☆22Jun 9, 2026Updated 4 months ago
- This repo demonstrates how to use the GitHub Code Scanning API to export all the alerts in an organization to a CSV file☆18Jul 12, 2023Updated 3 years ago
- GitHub Secret Scanning Auto Remediator (GSSAR)☆51Sep 3, 2026Updated last month
- Depstubber generates type-correct stubs for Go dependencies, for use in testing☆18Sep 10, 2026Updated last month
- This repository contains a list of papers about software supply chain☆29May 22, 2024Updated 2 years ago
- OSS-Fuzz vulnerabilities for OSV.☆191Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Public disclosure channel for security vulnerabilities☆16Nov 17, 2025Updated 11 months ago
- [Deprecated] GitHub's Field Team's CodeQL Custom Queries, Suites, and Configurations. See GitHubSecurityLab/CodeQL-Community-Packs instea…☆85May 1, 2024Updated 2 years ago
- GitHub Advanced Security Pull Request Security Team required review GitHub App☆36Oct 20, 2026Updated last week
- OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…☆836Oct 21, 2026Updated last week
- QEMU to drcov trace file☆12Nov 21, 2020Updated 5 years ago
- A dataset of software supply chain compromises. Please help us maintain it!☆130Sep 16, 2022Updated 4 years ago
- a tool that compiles a csv of all h1 program stats☆50Jul 2, 2023Updated 3 years ago
- Action to detect if a secret is initially detected in a pull request☆24Oct 19, 2026Updated last week
- GitHub Code Scanning Mean Time to Remediate (GCSMTTR)☆14Jun 27, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- OWASP Foundation Web Respository☆16Oct 9, 2025Updated last year
- Optimize the utilization of GHAS licenses in an enterprise (or organization)☆15Feb 12, 2026Updated 8 months ago
- SARIF Microsoft Visual Studio Code extension☆140Updated this week
- Large Commit Precise Vulnerability Dataset based on AOSP CVE☆70May 12, 2023Updated 3 years ago
- Coverage-guided, in-process fuzzing for the JVM☆1,262Updated this week
- This repository contains CodeQL queries and libraries which support various Coding Standards.☆231Updated this week
- Keeps track of what repos needs to be saved from the new Github " Exploits and malware policy"☆22May 15, 2021Updated 5 years ago
- An eBPF-based security research tool that demonstrates offensive techniques including network discovery, file system monitoring, process …☆42Oct 14, 2026Updated 2 weeks ago
- Examples of Custom Secret Scanning Patterns for use with GitHub Secret Protection/Advanced Security☆182Aug 5, 2026Updated 2 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Helping allocate resources to secure the critical open source projects we all depend on.☆413Sep 2, 2026Updated last month
- ☆80Updated this week
- GitHub Advanced Security Python Toolkit☆14Aug 3, 2026Updated 2 months ago
- Tools to add packaging metadata to ELF files☆28Jul 22, 2026Updated 3 months ago
- REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and defau…☆264Jan 13, 2022Updated 4 years ago
- Manage a uniform team of security managers for every organization in your enterprise☆24Aug 11, 2026Updated 2 months ago
- A JavaScript components vulnerability scanner, based on RetireJS☆36Jun 8, 2020Updated 6 years ago