A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from the web.
☆151Jan 28, 2024Updated 2 years ago
Alternatives and similar repositories for Software-Supply-Chain-Security
Users that are interested in Software-Supply-Chain-Security are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A compilation of resources in the software supply chain security domain, with emphasis on open source☆380Jun 7, 2026Updated 5 months ago
- Finding Fixed Vulnerabilities with Off-the-Shelf Static Analysis☆11Dec 1, 2023Updated 2 years ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆122Oct 21, 2026Updated 2 weeks ago
- 🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)☆63Updated this week
- Build a CVE library with aggregated CISA, EPSS and CVSS data☆29Sep 27, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- VFCFinder: Searching for the Missing Vulnerability Fixing Commits☆31Dec 1, 2023Updated 2 years ago
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆84Aug 7, 2026Updated 3 months ago
- Format agnostic SBOM tooling☆158Nov 20, 2025Updated 11 months ago
- My journey and notes on learning Offensive Security from the ground up☆21Dec 22, 2025Updated 10 months ago
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆642Updated this week
- A reading list for software supply-chain security.☆364Nov 21, 2022Updated 3 years ago
- Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.☆638Jun 2, 2026Updated 5 months ago
- ☆117Oct 8, 2026Updated 3 weeks ago
- A place to systematically store software bill of materials (SBOM) documents.☆52Jun 1, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Tool for using SBOMs with ClearlyDefined☆13Dec 8, 2025Updated 10 months ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,570Updated this week
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆318Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- ☆19Jul 30, 2024Updated 2 years ago
- Utility that provides an API platform for validating, querying and managing BOM data☆168Oct 30, 2026Updated last week
- NVD API 2.0 for python☆14Sep 26, 2024Updated 2 years ago
- Data about all known supply-chain attacks through history☆81Oct 31, 2026Updated last week
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆34Apr 4, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Enrich SBOMs with data from third party services☆242Sep 21, 2026Updated last month
- A framework for identifying vulnerabilities in VS Code extensions☆20Jul 9, 2024Updated 2 years ago
- ☆193May 29, 2026Updated 5 months ago
- Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.☆95Updated this week
- Websec interview questions by tib3rius answered☆310Nov 13, 2023Updated 2 years ago
- EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.☆35Jan 4, 2026Updated 10 months ago
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆245May 26, 2025Updated last year
- Protect against malicious open source packages 🤖☆1,125Updated this week
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…☆72Nov 27, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE.☆20Feb 2, 2024Updated 2 years ago
- This tool compares two Software Bill of Materials (SBOMs) and reports the differences.☆45Mar 9, 2026Updated 7 months ago
- Command line interface for Kusari☆16Updated this week
- SLSA level 3 action☆12Apr 26, 2024Updated 2 years ago
- A tool for analyzing the attack surface of an application☆19Mar 5, 2025Updated last year
- A collection of dashboards, templates, API's and Power BI code for vulnerability management and analysis☆23Feb 2, 2025Updated last year
- A universal SBOM representation in protocol buffers☆339Updated this week