GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — Build software better, together
#
software-composition-analysisHere are 178 public repositories matching this topic...Language: All
Filter by language
Sort: Most stars
Sort options
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
security security-audit maven-plugin jenkins-plugin gradle-plugin build-tool ant-task vulnerability-detection software-composition-analysis
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
security owasp bom vulnerabilities appsec component-analysis nvd vulnerability-detection hacktoberfest sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
javascript chrome-extension security scanner grunt-plugins firefox-extension build-tool vulnerabilities software-composition-analysis vulnerable-libraries insecure-libraries sbom sbom-generator sbom-tool
🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
licensing packages open-source-licensing dependency-graph provenance dependencies license spdx copyright sca spdx-licenses license-checking license-scan copyright-scan software-composition-analysis oss-compliance purl package-url sbom cyclonedx
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
security scanner dependency vulnerability-detection software-supply-chain sca software-composition-analysis codescan
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
security continuous-delivery dependency-analysis cybersecurity pci-dss web-security compliance scanning cve-scanning tokenization gdpr security-tools devsecops software-composition-analysis zero-trust soc2 sbom scanning-tool sbom-generator log4shell
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
security spdx software-supply-chain sca swid devsecops software-composition-analysis software-bill-of-materials license-compliance sbom cyclonedx software-supply-chain-security
Protect against malicious open source packages 🤖
golang npm security rubygems static-analysis pypi hacktoberfest devsecops software-composition-analysis policy-as-code supply-chain-security
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.
python docker open-source tool containers compliance dependencies spdx metadata-extraction risk-management software-composition-analysis oss-compliance sbom supply-chain-security
Scans your project to determine what components you use
static-analysis dependencies package-management software-composition-analysis software-bill-of-materials sbom
A compilation of resources in the software supply chain security domain, with emphasis on open source
static-analysis awesome-list security-vulnerability dependencies vulnerability-management software-supply-chain cve-scanning attestation package-management reproducible-builds devsecops software-composition-analysis vulnerability-scanning dependency-management oss-compliance sbom supply-chain-security supply-chain-attacks software-supply-chain-security
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈
security devops security-audit scala sbt static-analysis owasp sbt-plugin infosec vulnerabilities cve appsec nvd software-security owasp-dependencycheck vulnerability-scanners security-automation devsecops software-composition-analysis
ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!
docker open-source virtual-machine code-analysis vulnerabilities binary-analysis license spdx sca scancode software-composition-analysis purl package-url license-compliance cyclonedx foss-compliance
A simple Java command-line utility to mirror the CVE JSON data from NIST.
A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
snyk vulnerability-databases component-analysis sca software-composition-analysis practical-devsecops
Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable dependencies are found.
java owasp maven-plugin pom component-analysis maven-lifecycle devsecops software-composition-analysis security-software dependency-track bom-upload
A scalable server implementation of the OSS Review Toolkit.
compliance spdx vulnerability-detection hacktoberfest sca software-composition-analysis ospo oss-compliance sbom cyclonedx oss-review-toolkit
A light-weight app to audit and inventory large codebases for open source license compliance.
spdx package-dependency remediation license-scan copyright-scan software-composition-analysis codescan oss-compliance software-bill-of-materials
♾️ Collection of DevSecOps Notes + Resources + Courses + Tools
secret-management threat-modeling threat-model secure-coding sdlc secure-development iast devsecops software-composition-analysis sast sbom dependency-track defectdojo devsecops-best-practices software-bill-of-material devsecops-resources devsecops-notes static-analysis-security-testing
The SCANOSS SBOM Workbench graphical user interface to scan and audit your source code.
Add this topic to your repoTo associate your repository with the software-composition-analysis topic, visit your repo's landing page and select "manage topics." |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |