A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
☆98Feb 11, 2025Updated last year
Alternatives and similar repositories for OSCAR
Users that are interested in OSCAR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ReviveIT (revit) is a proof of concept file recovery tool (carver)☆13Dec 3, 2020Updated 5 years ago
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆35Apr 4, 2023Updated 3 years ago
- Hands-on Exercises for "Dangerous attack paths: Modern Development Environment Security - Devices and CI/CD pipelines"☆45Sep 19, 2022Updated 3 years ago
- A CLI that scans for sensitive data in source code☆14Mar 22, 2023Updated 3 years ago
- Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools☆19Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆11Apr 23, 2020Updated 6 years ago
- NVD API 2.0 client for CVE information☆14May 15, 2025Updated last year
- CLI tool to validate CVE v5 JSON records.☆14Jul 10, 2026Updated last week
- A tool to generate a SBOM (Software Bill of Materials) for an installed Python module☆37Jun 4, 2026Updated last month
- SLSA Proposals☆12Jan 29, 2024Updated 2 years ago
- Windows Event Log Knowledge Base☆34Jul 6, 2026Updated 2 weeks ago
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆34Apr 22, 2025Updated last year
- Utilities for working with vivisect☆26Oct 1, 2025Updated 9 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆110May 20, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Damn Vulnerable SCA Application☆46Mar 30, 2026Updated 3 months ago
- Software Supply Chain Security Platform☆412Updated this week
- Rust implementation of SafePOSIX☆13May 13, 2025Updated last year
- Supply-chain Levels for Software Artifacts☆1,892Updated this week
- Exploit & Vulnerability Intelligence Repository☆25Jan 20, 2025Updated last year
- A full insecure kubernetes application for testing security tools☆95Mar 28, 2026Updated 3 months ago
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆224Updated this week
- A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles☆590May 27, 2026Updated last month
- Analysis Correlation Engine☆26Sep 8, 2019Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Material for HolyJS 2020 Moscow☆12Nov 28, 2020Updated 5 years ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,518Updated this week
- Microsoft Compound File Binary (CFB) file format Python IO☆15Apr 2, 2026Updated 3 months ago
- PDF Parser is a command line tool and go library for analyzing PDF files.☆14Jan 25, 2024Updated 2 years ago
- Python libary to normalize Yara signatures☆19Oct 9, 2020Updated 5 years ago
- Remote Desktop Protocol .NET Console Application for Authenticated Command Execution☆12Jan 21, 2020Updated 6 years ago
- Enrich SBOMs with data from third party services☆231May 18, 2026Updated 2 months ago
- Admin Submission API allows submission of URLs, mail messages, file mail messages and files to Microsoft to re-scan and get newest verdic…☆10Aug 6, 2021Updated 4 years ago
- Collection of Go packages to work with SPDX files☆170Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Things to know when DFIR occurs near a vault deployment.☆44May 21, 2018Updated 8 years ago
- A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.☆151Jul 10, 2026Updated last week
- ☆12Aug 8, 2022Updated 3 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆51Jun 1, 2023Updated 3 years ago
- Demo repository for running eBPF in GitHub Actions☆23Mar 27, 2025Updated last year
- Trivy plugin for OCI referrers☆23May 13, 2024Updated 2 years ago
- SecTalks socially authored website☆20Jul 14, 2026Updated last week