A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
☆99Feb 11, 2025Updated last year
Alternatives and similar repositories for OSCAR
Users that are interested in OSCAR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A GitHub Action for using OX Security to scan for vulnerabilities in your software projects☆14Nov 12, 2024Updated last year
- A standard API specification for exchanging supply chain artifacts and intelligence☆121Oct 21, 2026Updated last week
- Sharing software supply chain security open source projects☆54Dec 19, 2022Updated 3 years ago
- PURL to CPE Relationship mapping project.☆132Updated this week
- Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev☆10May 19, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆34Apr 4, 2023Updated 3 years ago
- DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.☆41May 22, 2026Updated 5 months ago
- Hands-on Exercises for "Dangerous attack paths: Modern Development Environment Security - Devices and CI/CD pipelines"☆46Sep 19, 2022Updated 4 years ago
- Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks☆64May 22, 2026Updated 5 months ago
- A CLI that scans for sensitive data in source code☆14Mar 22, 2023Updated 3 years ago
- Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools☆19Sep 2, 2026Updated last month
- Binary builds for dep-scan - The Dependency Scanner☆10Apr 1, 2024Updated 2 years ago
- Runtime Security Solution for your CI/CD Pipeline☆125Updated this week
- ☆11Oct 10, 2018Updated 8 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆28Aug 6, 2020Updated 6 years ago
- CLI tool to validate CVE v5 JSON records.☆16Jul 28, 2026Updated 3 months ago
- Parse Salesforce Flow meta.xml to text-based graphical formats (e.g. mermaid)☆21Aug 28, 2024Updated 2 years ago
- Enrich SBOMs with data from third party services☆241Sep 21, 2026Updated last month
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,572Updated this week
- Scans SBOMs for vulnerabilities with Grype☆87Updated this week
- Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂☆122Dec 24, 2025Updated 10 months ago
- ☆52Updated this week
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆151Jan 28, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ReviveIT (revit) is a proof of concept file recovery tool (carver)☆13Dec 3, 2020Updated 5 years ago
- Simple implementation of an AppSec Pipeline using the Gasp library☆13Sep 8, 2019Updated 7 years ago
- A combined list of helpful awscli commands from Scott Piper's flaws.cloud exercise as well as from Beau Bullock's Breaching the Cloud Tra…☆19Mar 1, 2021Updated 5 years ago
- Send GKE audit events to falco☆12Jan 8, 2023Updated 3 years ago
- NVD API 2.0 client for CVE information☆14May 15, 2025Updated last year
- Busted. With duct tape, spit and tears. Brought to you by beer.☆12Nov 4, 2021Updated 4 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆51Jun 1, 2023Updated 3 years ago
- Audit python packages for known vulnerabilities☆34Mar 9, 2022Updated 4 years ago
- SLSA Proposals☆13Jan 29, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Supply-chain Levels for Software Artifacts☆1,954Updated this week
- A tool to generate a SBOM (Software Bill of Materials) for an installed Python module☆40Jun 4, 2026Updated 4 months ago
- A project to visualize the software supply chain☆58Sep 9, 2023Updated 3 years ago
- Service that scans your Infrastructure as Code for common vulnerabilities☆49Dec 14, 2023Updated 2 years ago
- A full insecure kubernetes application for testing security tools☆96Mar 28, 2026Updated 7 months ago
- A GitHub Action for checking broken links in Markdown files☆20Updated this week
- Software Supply Chain Security Platform☆427Updated this week