Snyk Scan

Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: - pipe: snyk/snyk-scan:1.0.2 variables: SNYKTOKEN: ""...

murphysec

中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...

retire.js

Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...

foxguard

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. PyPI npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14...

Vulfy

🐺 Vulfy Fast, cross-language vulnerability scanner that doesn't mess around. 🚀 What is Vulfy? Vulfy is a lightning-fast vulnerability scanner that checks your project dependencies for known security issues across 9 programming languages. Built with Rust for maximum performance, it integrates with...

remic

remic Vulnerability Scanner for Detecting Publicly Disclosed Vulnerabilities in Application Dependencies Usage $ remic -h NAME: remic - A simple and fast tool for detecting vulnerabilities in application dependencies USAGE: remic options file VERSION: 0.0.2 OPTIONS: --format value, -f value forma...

scanner-for-CVE-2025-55182-vulnerability

🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next.js RCE This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 a critical Remote Code Execution affecting specific versions of React Serve...

Dependency Scanning

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

ore-mal-pkg-inspector

OreWatch Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner A production-grade security tool for detecting malicious packages and supply chain threats across npm, PyPI, Maven, RubyGems, Go, and Cargo ecosystems. Leverages automated threat intelligence collection from...

dep-scan

Introduzione OWASP dep-scan è uno strumento di audit di sicurezza e rischio di nuova generazione basato su vulnerabilità note, advisory e limitazioni di licenza per le dipendenze di progetto. Sia i repository locali che le immagini container sono supportati come input, e lo strumento è ideale per...

osv-scanner v2.6.0

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

CVE-2026-87052

A flaw was found in operator-foundry. The absence of automated dependency-update and vulnerability-scanning configurations in the repository increases the risk of undetected security vulnerabilities. This lack of automated security checks could potentially lead to the inclusion of known vulnerabl...

Dependency Scanning v2.1.1

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

vet v1.19.0

Find malicious packages, vulnerabilities and risky CI workflows before they reach production. Install • Docs • Commands • Policy • Discord !NOTE This branch is vet v2, in alpha. vet v1 is on main and stays the latest release. The v2.0.0 release notes map each v1 command and flag to v2. Why vet Yo...

MINI-2493-G63V-4885

Bulletin has no description...

GO-2025-4098 vulnerabilities

Vulnerabilities for packages: syft-fips, kubescape-operator-fips, undock, prometheus-node-exporter-fips, sriov-network-device-plugin, kubernetes-csi-driver-nfs, zarf, neuvector-scanner-fips, kubescape-operator, ctop-fips, trivy, virt-launcher, envoy-gateway, k8s-device-plugin, osv-scanner,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: kapp-controller, rke2-cloud-provider-fips, fluent-operator-fips, jsonnet-bundler, aws-load-balancer-controller-fips, dcgm-exporter, regclient-fips, kubernetes-csi-external-snapshotter-fips, jupyterhub-k8s-image-awaiter-fips, prometheus-adapter-fips, goose-fips, corte...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rolesanywhere-fips, rke2-cloud-provider-fips, crossplane-provider-aws-datasync-fips, trufflehog-fips, kubernetes-csi-external-snapshotter-fips, tekton-chains, prometheus-adapter-fips, crossplane-provider-aws-cognitoidp, goose-fips, cortex,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rolesanywhere-fips, rke2-cloud-provider-fips, crossplane-provider-aws-datasync-fips, kubernetes-csi-external-snapshotter-fips, tekton-chains, prometheus-adapter-fips, crossplane-provider-aws-cognitoidp, cortex,...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: kapp-controller, rke2-cloud-provider-fips, fluent-operator-fips, k8sgpt-operator, aws-load-balancer-controller-fips, regclient-fips, trufflehog-fips, kubernetes-csi-external-snapshotter-fips, tekton-chains, jupyterhub-k8s-image-awaiter-fips, go-fips,...