swinslow / npm-spdxLinks
Golang tool to pull and summarize NPM license info
☆13Updated 2 years ago
Alternatives and similar repositories for npm-spdx
Users that are interested in npm-spdx are comparing it to the libraries listed below
Sorting:
- 📖 A repo of configuration examples for StackHawk's Hawkscan!☆17Updated last month
- Darkbit Cloud Security Tools☆25Updated 4 years ago
- Compare vulnerability scanners results (to make them better!)☆22Updated this week
- Decision trees generated via Graphviz to inform pragmatic threat modelling.☆11Updated 4 years ago
- Github Action implementation of SLSA Provenance Generation☆50Updated 2 weeks ago
- Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.☆21Updated 2 years ago
- Source for official CVE Program policy documents.☆16Updated last week
- AWS container security survey 2020☆11Updated 4 years ago
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Updated 2 years ago
- in-toto is a framework to secure the software supply chain.☆71Updated 9 months ago
- Prevent leaks with gitleaks, and use tests to validate☆32Updated 4 months ago
- SBOM Move - Automate build and transfer of SBOMs across systems☆24Updated 2 weeks ago
- An SBOM query language and associated utilities☆54Updated last year
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆129Updated 8 months ago
- NIST OSCAL SDK and CLI☆38Updated 5 years ago
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Updated 8 months ago
- TACOS framework structural details☆20Updated 5 months ago
- ☆18Updated last year
- Report missing advisories and corrections on OSS Index☆17Updated 2 years ago
- Sample code snippets for consuming the CloudSploit API☆13Updated last year
- This tool allows using a SPIFFE JWT to authenticate to AWS APIs☆34Updated 2 months ago
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Updated last year
- Static analysis for CloudFormation templates to identify common misconfiguration☆56Updated 3 years ago
- A generic skeleton project for quickly getting a new cisagov project started.☆18Updated this week
- ☆54Updated this week
- Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.☆15Updated 4 years ago
- vexctl is a tool to attest VEX impact statements☆45Updated 2 years ago
- Slack alert bot for matching Github Audit Events☆10Updated 11 months ago
- Github Audit Tool for Organizations☆37Updated 2 months ago
- SBOM Explorer - Discover and pull public SBOMs☆20Updated 4 months ago