xeol-io / xeolLinks
A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
☆429Updated last week
Alternatives and similar repositories for xeol
Users that are interested in xeol are comparing it to the libraries listed below
Sorting:
- SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more☆522Updated this week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆514Updated last week
- Software Supply Chain Security Platform☆373Updated this week
- Inspect certificate authorities in container images☆240Updated 2 months ago
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- An open source, cloud-native security to protect everything from build to runtime☆397Updated this week
- boostsecurityio/poutine☆361Updated last week
- A security layer for Git repositories☆572Updated this week
- Open source compliance tool for development platforms.☆285Updated 2 years ago
- SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…☆217Updated this week
- A license scanner for container images and filesystems.☆137Updated this week
- Enrich SBOMs with data from third party services☆214Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆237Updated last year
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆267Updated last week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆829Updated 10 months ago
- open source, cloud-native, graph-based asset inventory☆388Updated this week
- Verify provenance from SLSA compliant builders☆306Updated 2 months ago
- OpenVEX Specification☆167Updated 3 weeks ago
- A universal SBOM representation in protocol buffers☆315Updated this week
- ☆255Updated 2 weeks ago
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆303Updated this week
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆110Updated this week
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆597Updated 10 months ago
- Throw a tag at it and it comes back with a checksum.☆155Updated this week
- Validate the isolation posture of your container environment.☆311Updated last month
- A tool to create, transform and attest VEX metadata☆172Updated last week
- BadRobot - Operator Security Audit Tool☆223Updated last week
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆172Updated last year
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago
- Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages☆215Updated this week