Biapy's Bookmarks

npq

https://github.com/lirantal/npq

apache2-licensed command-line foss javascript nodejs npm open-source package-manager security supply-chain typescript

Added 1 week ago

CycloneDX

https://cyclonedx.org/

cyclonedx devsecops owasp php python sbom secops security standard supply-chain

Added 2 weeks ago

NPM Supply Chain Security Scanner

https://github.com/Drasrax/npm-shai-hulud-scanner

foss javascript mit-licensed npm open-source secops security supply-chain vulnerability-scanner

Added 4 weeks ago

NPM Security Best Practices

https://github.com/bodadotsh/npm-security-best-practices

best-practices javascript nodejs npm security supply-chain

Added 1 month ago

OpenSSF Scorecard

https://openssf.org/projects/scorecard/

apache2-licensed audit foss open-source security supply-chain

Added 6 months ago

Package Analysis – Open Source Security Foundation

https://openssf.org/package-analysis/

apache2-licensed audit foss non-profit open-source security supply-chain

Added 6 months ago

in-toto

https://in-toto.io/

apache2-licensed continuous-integration development foss framework open-source python security supply-chain

Added 6 months ago

Supply-Chain Firewall

https://github.com/DataDog/supply-chain-firewall/

apache2-licensed command-line development foss javascript npm open-source python security supply-chain

Added 6 months ago

GuardDog

https://github.com/DataDog/guarddog

apache2-licensed audit command-line continuous-integration devsecops foss javascript npm open-source python sbom security supply-chain

Added 6 months ago

s3cme

https://github.com/mchmarny/s3cme

boilerplate continuous-delivery continuous-integration development devops devsecops golang open-source security supply-chain

Added 1 year ago

Cosign

https://github.com/sigstore/cosign

apache2-licensed command-line container devsecops docker encryption foss oci open-source security supply-chain

Added 1 year ago

KubeClarity

https://github.com/openclarity/kubeclarity

foss kubernetes open-source sbom security supply-chain web-app

Added 1 year ago

Sigstore

https://www.sigstore.dev/

apache2-licensed devsecops encryption foss gitlab open-source sbom security supply-chain

Added 1 year ago

OWASP Dependency-Check

https://owasp.org/www-project-dependency-check/

cpe devsecops open-source owasp sca security supply-chain

Added 1 year ago

libyear

https://libyear.com/

audit security standard supply-chain versioning

Added 1 year ago

SLSA

https://slsa.dev/

security specification standard supply-chain

Added 2 years ago

Open Source Insights

https://deps.dev/

api dependency-graph security supply-chain web-service

Added 2 years ago

Socket

https://socket.dev/

command-line continuous-delivery devops javascript npm security supply-chain

Added 2 years ago

OSV

https://osv.dev/

apache2-licensed continuous-integration database devsecops foss open-source secint security supply-chain vulnerability web-service

Added 2 years ago

Data Food Consortium

https://www.datafoodconsortium.org/en/

food standard supply-chain

Added 2 years ago