xeol-io / xeolLinks
A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
☆426Updated last week
Alternatives and similar repositories for xeol
Users that are interested in xeol are comparing it to the libraries listed below
Sorting:
- SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more☆517Updated this week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆510Updated this week
- A security layer for Git repositories☆568Updated this week
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- Open source compliance tool for development platforms.☆286Updated 2 years ago
- SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…☆202Updated this week
- Inspect certificate authorities in container images☆240Updated last month
- Software Supply Chain Security Platform☆369Updated this week
- Enrich SBOMs with data from third party services☆211Updated 3 weeks ago
- A universal SBOM representation in protocol buffers☆315Updated this week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆826Updated 9 months ago
- boostsecurityio/poutine☆354Updated last week
- A tool to create, transform and attest VEX metadata☆170Updated last week
- A license scanner for container images and filesystems.☆130Updated last week
- Chalk allows you to follow code from development, through builds and into production.☆413Updated last week
- Generate a score for your sbom to understand if it will actually be useful.☆237Updated last year
- Runtime Security Solution for your CI/CD Pipeline☆112Updated last month
- Validate the isolation posture of your container environment.☆311Updated 3 weeks ago
- An open source, cloud-native security to protect everything from build to runtime☆393Updated this week
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆597Updated 9 months ago
- Throw a tag at it and it comes back with a checksum.☆151Updated this week
- OpenVEX Specification☆163Updated 7 months ago
- Regal is a linter and language server for Rego, bringing your policy development experience to the next level!☆357Updated this week
- KBOM - Kubernetes Bill of Materials☆323Updated 5 months ago
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆261Updated last week
- By scanning CI/CD misconfigurations, Allero helps reduce production issues, harden your security posture and shift-left CI/CD from DevOps…☆205Updated 2 years ago
- Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…☆941Updated this week
- The security workflow engine!☆136Updated last month
- ForgeMT is a secure, scalable GitHub Actions runner platform for ephemeral workloads. Designed for multi-tenant environments, it automate…☆197Updated last week
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago