xeol-io / xeolLinks
A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
☆400Updated last week
Alternatives and similar repositories for xeol
Users that are interested in xeol are comparing it to the libraries listed below
Sorting:
- A security layer for Git repositories☆535Updated this week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆488Updated last week
- Evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more☆475Updated this week
- Evaluate source control (GitHub) security posture☆250Updated 2 years ago
- boostsecurityio/poutine☆306Updated 2 weeks ago
- Inspect certificate authorities in container images☆234Updated 3 weeks ago
- Software Supply Chain Security Platform☆340Updated this week
- An open source, cloud-native security to protect everything from build to runtime☆306Updated this week
- Enrich SBOMs with data from third party services☆178Updated 3 months ago
- Open source compliance tool for development platforms.☆286Updated last year
- Validate the isolation posture of your container environment.☆291Updated 2 weeks ago
- SBOM Assess - Evaluate SBOM quality and compliance☆220Updated last week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆813Updated 3 months ago
- Search an SBOM for licenses and the packages they belong to☆94Updated last week
- Runtime Security Solution for your CI/CD Pipeline☆105Updated last month
- Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…☆846Updated 2 weeks ago
- Next Generation Software Composition Analysis (SCA) with Malicious Package Detection, Code Context & Policy as Code☆531Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆230Updated 11 months ago
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆571Updated 3 months ago
- Verify provenance from SLSA compliant builders☆271Updated 2 weeks ago
- open source, cloud-native, graph-based asset inventory☆357Updated this week
- Chalk allows you to follow code from development, through builds and into production.☆385Updated this week
- ☆240Updated last week
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆205Updated last week
- A tool to create, transform and attest VEX metadata☆146Updated 2 weeks ago
- SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…☆143Updated this week
- OpenVEX Specification☆155Updated last month
- KBOM - Kubernetes Bill of Materials☆317Updated 3 months ago
- CI/CD Security Analyzer☆659Updated 4 months ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆110Updated last week