thinksabin / DTrackAuditor
DTrackAuditor is the python script to faciliate usage of DependencyTrack in the CI.
☆10Updated 2 weeks ago
Alternatives and similar repositories for DTrackAuditor:
Users that are interested in DTrackAuditor are comparing it to the libraries listed below
- OWASP Dependency Track API client for intergration into CI/CD pipeline☆52Updated 6 months ago
- Python API library for DefectDojo☆41Updated last year
- Container Security Verification Standard☆58Updated 5 years ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…☆105Updated this week
- A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain☆90Updated last week
- Software Component Verification Standard (SCVS)☆140Updated 10 months ago
- Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.☆66Updated this week
- Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…☆109Updated 11 months ago
- Sharing software supply chain security open source projects☆45Updated 2 years ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆130Updated last year
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 8 years ago
- A simple Java command-line utility to mirror the entire contents of VulnDB.☆44Updated 2 months ago
- Security scanning & static analysis tool☆94Updated 4 months ago
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆193Updated 2 months ago
- This Repository contains the stable beta preview of the next major secureCodeBox (SCB) release v2.0.0.☆24Updated 4 years ago
- Evaluation Framework for Dependency Analysis (EFDA)☆43Updated 2 years ago
- Tools for conducting analysis of CVE data in Elasticsearch☆74Updated 7 months ago
- A comprehensive list of software composition analysis tools.☆136Updated 8 months ago
- DefectDojo Community Content☆17Updated 4 months ago
- Publishes BOMs to Dependency-Track from GitHub Actions☆50Updated 4 months ago
- ☆179Updated this week
- OWASP Kubernetes Security Testing Guide☆37Updated 5 months ago
- Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions☆99Updated last year
- OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.☆17Updated this week
- NVD, Ubuntu, Alpine☆420Updated this week
- Produce an Open Source Vulnerability JSON file based on information in an SPDX document☆63Updated 8 months ago
- Stakeholder-Specific Vulnerability Categorization☆136Updated this week
- apt2sbom python package generates SPDX or CycloneDX files from Ubuntu APT and Python packaging information☆22Updated 3 years ago
- Utility that provides an API platform for validating, querying and managing BOM data☆102Updated 3 months ago
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆289Updated this week