safedep / vetLinks
Protect against malicious open source packages 🤖
☆919Updated last week
Alternatives and similar repositories for vet
Users that are interested in vet are comparing it to the libraries listed below
Sorting:
- Prevent merging of malicious code in pull requests☆251Updated 9 months ago
- Kingfisher is a blazingly fast and highly accurate tool for secret detection and live validation across files, Git repos, GitHub, GitLab,…☆708Updated this week
- CI/CD Security Analyzer☆725Updated 10 months ago
- select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, r…☆531Updated last week
- OSV-SCALIBR: A library for Software Composition Analysis☆545Updated this week
- A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs☆424Updated 2 weeks ago
- A security layer for Git repositories☆563Updated this week
- Software Supply Chain Security Platform☆367Updated this week
- 🔎 Static code analysis engine to find security issues in code.☆1,976Updated this week
- boostsecurityio/poutine☆350Updated last month
- SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…☆198Updated last week
- Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams☆78Updated last week
- Chalk allows you to follow code from development, through builds and into production.☆415Updated this week
- Gram is Klarna's own threat model diagramming tool☆330Updated this week
- Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git☆137Updated last week
- The security workflow engine!☆135Updated last month
- 💀 Don't fear the Reaper 👻☆715Updated last week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆825Updated 8 months ago
- Metis is an open-source, AI-driven tool for deep security code review☆429Updated this week
- Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system…☆343Updated 2 months ago
- Validate the isolation posture of your container environment.☆307Updated this week
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆597Updated 8 months ago
- Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages☆210Updated this week
- A flexible framework for security teams to build and deploy AI-powered workflows that complement their existing security operations.☆146Updated last week
- A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalo…☆384Updated last year
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆138Updated 10 months ago
- SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more☆516Updated this week
- Runtime Security Solution for your CI/CD Pipeline☆112Updated last month
- Scan MCP servers for potential threats & security findings.☆673Updated last week
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆426Updated last week