ossf / secure-sw-dev-fundamentals

Related projects ⓘ

Alternatives and complementary repositories for secure-sw-dev-fundamentals

• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆135Updated 7 months ago
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆299Updated 6 months ago
• owaspsamm / core
  Core model including reused documentation
  ☆89Updated 2 months ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆92Updated 8 months ago
• OWASP / OpenCRE
  ☆80Updated this week
• CycloneDX / bom-examples
  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
  ☆179Updated last week
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆180Updated last week
• ossf / wg-supply-chain-integrity
  Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …
  ☆177Updated 9 months ago
• ossf / wg-metrics-and-metadata
  The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed co…
  ☆221Updated 6 months ago
• ossf / s2c2f
  The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…
  ☆189Updated 2 months ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆169Updated 9 months ago
• ossf / wg-securing-critical-projects
  Helping allocate resources to secure the critical open source projects we all depend on.
  ☆331Updated last month
• OWASP / www-project-proactive-controls
  OWASP Foundation Web Respository
  ☆128Updated last week
• adamshostack / DFD3
  ☆70Updated 3 weeks ago
• OWASP / www-project-developer-guide
  OWASP Project Developer Guide - Document and Project Web pages
  ☆88Updated this week
• OWASP / www-project-application-security-verification-standard
  OWASP Foundation Web Respository
  ☆68Updated this week
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆54Updated last year
• OWASP / www-project-integration-standards
  OWASP Foundation Web Respository
  ☆27Updated 3 months ago
• owaspsamm / sammwise
  NextJS-based single-page application for completing and reviewing SAMM assessments
  ☆69Updated last year
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆221Updated 3 months ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆185Updated this week
• OWASP / cornucopia
  The source files and tools needed to build the OWASP Cornucopia decks in various languages
  ☆46Updated this week
• OWASP / www-project-samm
  OWASP Foundation Web Respository
  ☆40Updated last year
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆59Updated this week
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆104Updated 10 months ago
• OWASP / www-project-code-review-guide
  OWASP Code Review Guide Web Repository
  ☆122Updated 2 years ago
• OWASP / www-project-security-champions-guidebook
  OWASP Foundation Web Respository
  ☆19Updated last month
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆515Updated this week
• OWASP / www-project-security-knowledge-framework
  OWASP Foundation Web Respository
  ☆64Updated last year
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆254Updated this week