renovatebot / osv-offlineLinks
A collection of packages for using GitHub security advisories in Node.js.
☆16Updated this week
Alternatives and similar repositories for osv-offline
Users that are interested in osv-offline are comparing it to the libraries listed below
Sorting:
- Auto-generating docs repository for Renovate Bot☆55Updated this week
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆35Updated 2 months ago
- The service side of clearlydefined.io☆47Updated this week
- Official GitHub Action for OpenSSF Scorecard.☆316Updated last week
- The model for the information captured in SPDX version 3 standard.☆89Updated this week
- The containerbase project's base image source☆44Updated this week
- Best practices for OAuth in Browser-Based Apps☆33Updated 2 weeks ago
- OpenSSF Working Group on Securing Software Repositories☆110Updated last month
- Orchestrate GitHub Actions Security☆293Updated last week
- Search Rekor for entries☆34Updated last week
- Find stale repositories in a GitHub organization.☆184Updated this week
- SBOM Edit - Conditional edits and merging of SBOMs☆74Updated 2 weeks ago
- Technical Advisory Council☆127Updated this week
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆191Updated 3 months ago
- Generate SBOMs with gh CLI☆189Updated last month
- creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects☆130Updated last month
- Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD …☆160Updated last week
- Enrich SBOMs with data from third party services☆178Updated this week
- ☆32Updated this week
- Find license compliance and security issues in your applications with FOSSA and GitHub Actions.☆54Updated this week
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆64Updated last year
- Machine-readable specification for the attestation of security-relevant data.☆59Updated 2 weeks ago
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆97Updated last year
- This plugin provides dependency metadata for Docker images☆36Updated this week
- Doc, wiki and organizational content for ClearlyDefined☆97Updated 2 months ago
- Tool for visualizing the Open SSF Scorecard Api data in a human friendly way☆16Updated this week
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆134Updated last week
- A GitHub App that allows you to contribute upstream using private mirrors of public projects☆163Updated last month
- Action for generating attestations for workflow artifacts☆53Updated 2 weeks ago
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆203Updated this week