bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

DevAudit

참고 : DevAudit은 OSS Index 데이터베이스를 사용하며, 일부 속도 제한이 있습니다. 제한에 도달하는 것을 발견하면 이슈를 제기해 주십시오. 인증된 사용자는 더 높은 제한을 받으며, 곧 DevAudit에 인증을 구현할 예정입니다. 대부분의 비인증 사용자는 많은 사용 사례에서 제한을 느끼지 못할 것입니다. 일반적으로 더 큰 프로젝트나 더 많은 프로젝트 볼륨에서만 작동합니다. DevAudit: 개발 감사 최신 릴리즈는 releases 페이지에서 받으십시오. 목차 About Features Requirements...

ossindex-maven-plugin

It is an offensive tool for dependency audit. The primary CVE ID is not present in the provided context. The target product/service or framework is Maven, and the vulnerability class/vector is dependency audit. Notable dependencies/tooling include the OSS Index REST API v2.0. The execution contex...

UPDATE: OWASP Dependency-Check 5.0.0

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. About 18 hours ago, a new version was released. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP...

Multi Purpose DevOps Security Auditing Tool: DevAudit

Multi Purpose DevOps Security Auditing Tool DevAudit is an open-source, cross-platform, multi-purpose security auditing tool targeted at developers and DevOps practitioners that detects security vulnerabilities at multiple levels of the solution stack. DevAudit provides a wide array of auditing...