renovatebot / osv-offlineLinks
A collection of packages for using GitHub security advisories in Node.js.
☆16Updated this week
Alternatives and similar repositories for osv-offline
Users that are interested in osv-offline are comparing it to the libraries listed below
Sorting:
- Auto-generating docs repository for Renovate Bot☆58Updated this week
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆38Updated 5 months ago
- Official GitHub Action for OpenSSF Scorecard.☆338Updated this week
- Orchestrate GitHub Actions Security☆299Updated this week
- Renovate base docker image☆14Updated this week
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆134Updated last week
- The service side of clearlydefined.io☆50Updated this week
- A GitHub Action used for publishing an Action to ghcr.io as an OCI container.☆107Updated 2 months ago
- SLSA Proposals☆10Updated last year
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆215Updated this week
- JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…☆29Updated last year
- a repository for documenting and coordinating the foundation's security collaboration space☆33Updated last month
- GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.☆129Updated last week
- The model for the information captured in SPDX version 3 standard.☆94Updated this week
- ☆47Updated this week
- Search Rekor for entries☆38Updated last week
- Common Release Data for various projects in a consumable format, automatically updated.☆184Updated this week
- An Action for printing OIDC claims in GitHub Actions.☆111Updated last month
- GitHub CLI extension for working with CodeQL☆32Updated 8 months ago
- GitHub Action to combine multiple PRs into a single one☆136Updated 7 months ago
- Technical Advisory Council☆132Updated this week
- Action for generating attestations for workflow artifacts☆61Updated this week
- Pin your GitHub actions to a specific hash☆131Updated 4 months ago
- GitHub action to generate a CycloneDX SBOM for Node.js☆22Updated 3 months ago
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆98Updated last year
- GitHub token permissions Monitor and Advisor actions☆338Updated 3 weeks ago
- Publish a signed build provenance from your GitHub Actions workflow☆63Updated last year
- A GitHub App that allows you to contribute upstream using private mirrors of public projects☆171Updated this week
- Runs Dependabot Updates via GitHub Actions.☆110Updated last week
- Utility for bulk image, license, package, and vulnerability discovery in containerize workloads on GCP. Includes CLI and Service with cus…☆13Updated last year