swinslow / npm-spdxLinks
Golang tool to pull and summarize NPM license info
☆13Updated 2 years ago
Alternatives and similar repositories for npm-spdx
Users that are interested in npm-spdx are comparing it to the libraries listed below
Sorting:
- 📖 A repo of configuration examples for StackHawk's Hawkscan!☆17Updated last week
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Updated 2 years ago
- Darkbit Cloud Security Tools☆25Updated 4 years ago
- ☆30Updated this week
- Github Action implementation of SLSA Provenance Generation☆50Updated last week
- Source for official CVE Program policy documents.☆16Updated 2 months ago
- An SBOM query language and associated utilities☆54Updated last year
- Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.☆21Updated 2 years ago
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆128Updated 8 months ago
- Create a Docker image containing several security tools☆16Updated 3 months ago
- Check images in your charts for vulnerabilities☆42Updated 2 months ago
- NIST OSCAL SDK and CLI☆38Updated 5 years ago
- This tool allows using a SPIFFE JWT to authenticate to AWS APIs☆34Updated 2 months ago
- in-toto is a framework to secure the software supply chain.☆71Updated 8 months ago
- Compare vulnerability scanners results (to make them better!)☆22Updated last week
- vexctl is a tool to attest VEX impact statements☆45Updated 2 years ago
- Decision trees generated via Graphviz to inform pragmatic threat modelling.☆11Updated 4 years ago
- SBOM Move - Automate build and transfer of SBOMs across systems☆23Updated this week
- SBOM Search - Context aware search in SBOM repositories☆28Updated 2 weeks ago
- SBOM Explorer - Discover and pull public SBOMs☆20Updated 3 months ago
- Sample code snippets for consuming the CloudSploit API☆13Updated last year
- Github Audit Tool for Organizations☆37Updated 2 months ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆84Updated last week
- AWS container security survey 2020☆11Updated 4 years ago
- A configurable and flexible admission controller toolkit for Kubernetes built in Go and extensible with Go.☆13Updated last year
- Report missing advisories and corrections on OSS Index☆17Updated 2 years ago
- TACOS framework structural details☆20Updated 4 months ago
- A generic skeleton project for quickly getting a new cisagov project started.☆18Updated this week
- Securing Alice's, Bob's and Carl's software supply chain using in-toto☆95Updated 2 weeks ago
- Prevent leaks with gitleaks, and use tests to validate☆32Updated 3 months ago