Machine-readable specification for the attestation of security-relevant data.
☆81Oct 6, 2026Updated this week
Alternatives and similar repositories for security-insights
Users that are interested in security-insights are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Privateer is a plugin-based framework for security & compliance evaluations.☆28Updated this week
- A CLI tool for creating secure by design/default source repos.☆28Jul 29, 2024Updated 2 years ago
- ☆87Sep 23, 2026Updated 2 weeks ago
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆50Jul 25, 2026Updated 2 months ago
- ORBIT: Open Resources for Baselines, Interoperability, and Tooling☆30Sep 29, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆35Apr 4, 2023Updated 3 years ago
- Minimizing rework for governance activities.☆62Updated this week
- Technical Advisory Council☆152Oct 1, 2026Updated last week
- ☆166Updated this week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆123Feb 28, 2026Updated 7 months ago
- A functional type system for policy inspection, audit and enforcement.☆14Aug 17, 2023Updated 3 years ago
- ☆101Sep 27, 2024Updated 2 years ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆117Updated this week
- A tool for measuring InnerSource collaboration in a repository☆20Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Command line interface for Kusari☆16Updated this week
- The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for ope…☆1,079Oct 5, 2026Updated last week
- Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security☆194Oct 4, 2026Updated last week
- Model Signing Specification☆30Sep 18, 2026Updated 3 weeks ago
- ☆51Updated this week
- PURL to CPE Relationship mapping project.☆132Updated this week
- OpenVEX Specification☆192Sep 9, 2026Updated last month
- A place to systematically store software bill of materials (SBOM) documents.☆51Jun 1, 2023Updated 3 years ago
- ☆22Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- The model for the information captured in SPDX version 3 standard.☆105Sep 29, 2026Updated last week
- Stakeholder-Specific Vulnerability Categorization☆197Updated this week
- Log monitor for Rekor to verify immutability and monitor entries☆58Updated this week
- Automatically assess and score software repositories for supply chain risk.☆133Sep 25, 2026Updated 2 weeks ago
- Continuous Compliance makes it possible to enforce company policy on repositories. Continuous Compliance will automatically check your re…☆22Nov 24, 2025Updated 10 months ago
- A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.☆42Oct 2, 2026Updated last week
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,553Updated this week
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆230Feb 4, 2026Updated 8 months ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆547Oct 5, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- SBOM Search - Context aware search in SBOM repositories☆32Updated this week
- 🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)☆56Updated this week
- ☆23Oct 26, 2021Updated 4 years ago
- A tiny tool for embedding CoSWID tags in EFI binaries☆26Sep 4, 2026Updated last month
- Software Supply Chain Security Platform☆422Updated this week
- Format agnostic SBOM tooling☆156Nov 20, 2025Updated 10 months ago
- A universal SBOM representation in protocol buffers☆334Updated this week