Lists (1)
Stars
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
A Java library for calculating CVSSv2, CVSSv3, and CVSSv4 scores and vectors
A simple task management system for managing AI dev agents
A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST
The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross S…
A set of security APIs meant to help secure Java code
Demonstrates how a malicious dependency could negatively impact the build output.
Contains instance scan checks to validate source code.
Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intell…
Gradle plugin that adds a 'taskTree' task that prints task dependency tree
The dependency-check gradle plugin is a Software Composition Analysis (SCA) tool that allows projects to monitor dependent libraries for known, published vulnerabilities.
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mirror the NVD.
An action to delete workflow runs in a repository.
Evaluate source control (GitHub) security posture
An extremely easy way to perform background processing in Java. Backed by persistent storage. Open and free for commercial use.
Java library for parsing report files from static code analysis.
weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.
Python library for audio and music analysis
Java decompiler, assembler, and disassembler
Externalize Java application access to protected resources as log messages.
A library for commenting GitHub with violations from static code analyzer reports.