DepFuzzer

DepFuzzer DepFuzzer es una herramienta utilizada para encontrar confusión de dependencias o proyectos donde el correo electrónico del propietario puede ser secuestrado. Instalar la herramienta /!\ Esta herramienta requiere python = 3.10 /!\ root@kitploit: $ python3 -m venv .venv $ source...

heisenberg-ssc-gha

Heisenberg Dependency Health Check GitHub Action Un leggero guardrail per le PR per gli aggiornamenti delle dipendenze. Scansiona solo le dipendenze nuove o modificate dal tuo lock/manifest, recupera segnali di salute e rischio deps.dev + euristiche, segnala pubblicazioni fresche, commenta un...

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

Google on Wednesday announced the 0.1 Beta version of GUAC short for Graph for Understanding Artifact Composition for organizations to secure their software supply chains. To that end, the search giant is making available the open source framework as an API for developers to integrate their own...