Alternatives and similar repositories for ahab

Users that are interested in ahab are comparing it to the libraries listed below

• ossf / Project-Security-Metrics
  Collect, curate, and communicate relevant security metrics for open source projects.
  ☆63Updated last year
• OSSIndex / vulns
  Report missing advisories and corrections on OSS Index
  ☆17Updated 2 years ago
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆60Updated 2 years ago
• meta-fun / awesome-software-supply-chain-security
  Sharing software supply chain security open source projects
  ☆50Updated 2 years ago
• anchore / grype-vscode
  Grype vulnerability check plugin for Visual Studio Code
  ☆22Updated 5 months ago
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated 2 years ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆199Updated last week
• ossf / ossf-landscape
  ☆29Updated this week
• in-toto / go-witness
  Go implementation of witness
  ☆37Updated this week
• eclipse-jbom / jbom
  ☆114Updated last month
• CycloneDX / cyclonedx-bom-repo-server
  A BOM repository server for distributing CycloneDX BOMs
  ☆77Updated last year
• tap8stry / orion
  Go beyond package manager discovery for SBOM
  ☆18Updated 3 years ago
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 3 years ago
• ossf / great-mfa-project
  The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute …
  ☆54Updated 3 years ago
• garethr / snyk-sbom-examples
  Examples of using Snyk's SBOM APIs.
  ☆16Updated 2 years ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• secure-systems-lab / dsse
  A specification for signing methods and formats used by Secure Systems Lab projects.
  ☆78Updated 8 months ago
• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated 4 months ago
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated 2 years ago
• SBOMit / specification
  ☆62Updated 10 months ago
• anchore / yardstick
  Compare vulnerability scanners results (to make them better!)
  ☆16Updated last month
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆139Updated 2 weeks ago
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆54Updated 7 months ago
• aquasecurity / harbor-scanner-aqua
  Aqua Enterprise scanner as a plug-in vulnerability scanner in the Harbor registry
  ☆37Updated 8 months ago
• wolfi-dev / advisories
  Security advisory data for Wolfi
  ☆18Updated this week
• cncf / clomonitor
  CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices
  ☆128Updated this week
• in-toto / community
  in-toto is a framework to secure the software supply chain.
  ☆70Updated 4 months ago
• CycloneDX / license-scanner
  Utility that provides an API and CLI to identify licenses and legal terms
  ☆49Updated this week
• digitalocean-labs / terraform-vault-github-oidc
  Terraform module to configure Vault for GitHub OIDC authentication from Action runners.
  ☆29Updated 9 months ago
• spdx / spdx-to-osv
  Produce an Open Source Vulnerability JSON file based on information in an SPDX document
  ☆64Updated last year