safedep / vetLinks
Protect against malicious open source packages 🤖
☆899Updated this week
Alternatives and similar repositories for vet
Users that are interested in vet are comparing it to the libraries listed below
Sorting:
- Kingfisher is a blazingly fast and highly accurate tool for secret detection and live validation across files, Git repos, GitHub, GitLab,…☆672Updated last week
- CI/CD Security Analyzer☆722Updated 9 months ago
- Prevent merging of malicious code in pull requests☆244Updated 8 months ago
- Software Supply Chain Security Platform☆361Updated this week
- select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, r…☆519Updated 2 weeks ago
- boostsecurityio/poutine☆347Updated last week
- 🔎 Static code analysis engine to find security issues in code.☆1,915Updated this week
- A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs☆422Updated 2 weeks ago
- A security layer for Git repositories☆558Updated last week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆820Updated 8 months ago
- SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…☆195Updated this week
- OSV-SCALIBR: A library for Software Composition Analysis☆541Updated this week
- Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams☆77Updated this week
- Gram is Klarna's own threat model diagramming tool☆328Updated this week
- Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git☆136Updated last week
- The security workflow engine!☆134Updated 2 weeks ago
- 💀 Don't fear the Reaper 👻☆703Updated 2 weeks ago
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆592Updated 8 months ago
- Runtime Security Solution for your CI/CD Pipeline☆111Updated 2 weeks ago
- Validate the isolation posture of your container environment.☆304Updated 3 months ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆129Updated 9 months ago
- kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …☆123Updated 2 months ago
- Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.☆561Updated last month
- Awesome secure by default libraries to help you eliminate bug classes!☆701Updated 7 months ago
- Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages☆206Updated this week
- A universal SBOM representation in protocol buffers☆308Updated last week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆506Updated last week
- Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini☆177Updated 7 months ago
- A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalo…☆383Updated last year
- SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more☆513Updated this week