renovatebot / osv-offlineLinks
A collection of packages for using GitHub security advisories in Node.js.
☆16Updated this week
Alternatives and similar repositories for osv-offline
Users that are interested in osv-offline are comparing it to the libraries listed below
Sorting:
- Auto-generating docs repository for Renovate Bot☆54Updated this week
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆35Updated 2 months ago
- Official GitHub Action for OpenSSF Scorecard.☆324Updated last week
- Orchestrate GitHub Actions Security☆294Updated this week
- Find stale repositories in a GitHub organization.☆185Updated this week
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆203Updated last week
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆133Updated last week
- Entitlements plugin for a robust audit log☆21Updated 3 weeks ago
- A GitHub App that allows you to contribute upstream using private mirrors of public projects☆166Updated last week
- The service side of clearlydefined.io☆48Updated this week
- Generate SBOMs with gh CLI☆189Updated 2 months ago
- ☆35Updated this week
- Action for generating attestations for workflow artifacts☆55Updated this week
- The model for the information captured in SPDX version 3 standard.☆91Updated this week
- Entitlements plugin to manage GitHub Orgs and Team memberships and access☆24Updated 2 weeks ago
- GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.☆128Updated this week
- Tool for visualizing the Open SSF Scorecard Api data in a human friendly way☆16Updated last week
- Doc, wiki and organizational content for ClearlyDefined☆101Updated last week
- Utility for bulk image, license, package, and vulnerability discovery in containerize workloads on GCP. Includes CLI and Service with cus…☆13Updated last year
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆96Updated last year
- Github Action implementation of SLSA Provenance Generation☆49Updated this week
- Technical Advisory Council☆129Updated last week
- Enrich SBOMs with data from third party services☆183Updated this week
- GitHub Action to combine multiple PRs into a single one☆132Updated 4 months ago
- OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues☆187Updated this week
- SBOM Edit - Conditional edits and merging of SBOMs☆74Updated 2 weeks ago
- Pin your GitHub actions to a specific hash☆124Updated last month
- Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD …☆163Updated this week
- Publish a signed build provenance from your GitHub Actions workflow☆63Updated last year
- A TypeScript library for creating dependency snapshots.☆50Updated last week