A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
☆99Feb 11, 2025Updated last year
Alternatives and similar repositories for OSCAR
Users that are interested in OSCAR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ReviveIT (revit) is a proof of concept file recovery tool (carver)☆13Dec 3, 2020Updated 5 years ago
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆35Apr 4, 2023Updated 3 years ago
- Hands-on Exercises for "Dangerous attack paths: Modern Development Environment Security - Devices and CI/CD pipelines"☆45Sep 19, 2022Updated 3 years ago
- PURL to CPE Relationship mapping project.☆128Updated this week
- ☆11Apr 23, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆28Aug 6, 2020Updated 6 years ago
- Binary builds for dep-scan - The Dependency Scanner☆10Apr 1, 2024Updated 2 years ago
- DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.☆41May 22, 2026Updated 3 months ago
- NVD API 2.0 client for CVE information☆14May 15, 2025Updated last year
- CLI tool to validate CVE v5 JSON records.☆15Jul 28, 2026Updated last month
- Busted. With duct tape, spit and tears. Brought to you by beer.☆12Nov 4, 2021Updated 4 years ago
- A wrapper script for https://sploitus.com to scrape query results for tools and exploits☆14Mar 3, 2019Updated 7 years ago
- Runtime Security Solution for your CI/CD Pipeline☆124Jun 23, 2026Updated 2 months ago
- SLSA Proposals☆13Jan 29, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Send GKE audit events to falco☆12Jan 8, 2023Updated 3 years ago
- Windows Event Log Knowledge Base☆34Jul 6, 2026Updated last month
- Utilities for working with vivisect☆26Oct 1, 2025Updated 10 months ago
- A project to visualize the software supply chain☆59Sep 9, 2023Updated 2 years ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆113Aug 12, 2026Updated 2 weeks ago
- What's in the black box? As we go forward we will need a model and machine readable bill of materials.☆13Oct 17, 2023Updated 2 years ago
- Sharing software supply chain security open source projects☆54Dec 19, 2022Updated 3 years ago
- Rust implementation of SafePOSIX☆13May 13, 2025Updated last year
- Supply-chain Levels for Software Artifacts☆1,919Updated this week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Automate vulnerability triage which prioritizes remediation over discovery☆25Updated this week
- A full insecure kubernetes application for testing security tools☆96Mar 28, 2026Updated 5 months ago
- A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles☆597May 27, 2026Updated 3 months ago
- ☆19Updated this week
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,536Updated this week
- Toy browser on single process / thread☆33Aug 9, 2022Updated 4 years ago
- Microsoft Compound File Binary (CFB) file format Python IO☆15Apr 2, 2026Updated 4 months ago
- PDF Parser is a command line tool and go library for analyzing PDF files.☆14Jan 25, 2024Updated 2 years ago
- SBOM Explorer - Discover and pull public SBOMs☆21May 23, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Remote Desktop Protocol .NET Console Application for Authenticated Command Execution☆11Jan 21, 2020Updated 6 years ago
- A sf CLI plugin that makes your life easier.☆39Jul 15, 2025Updated last year
- Enrich SBOMs with data from third party services☆235Updated this week
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆227Updated this week
- A utility to force query DNS over DoH off of CloudFlare API when DNS block is in place☆10Aug 26, 2018Updated 8 years ago
- Collection of Go packages to work with SPDX files☆170Aug 24, 2026Updated last week
- JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…☆33May 27, 2024Updated 2 years ago