AppThreat

vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.

atom

Atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

joern-lib

Python library for code analysis with CPG and Joern

dep-scan-action

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. No server required!

vuln-list

Linux upstream vulnerabilities data suitable for dep-scan

cpggen

Generate CPG for multiple languages for code and threat analysis

threat-db

A graph database for components, vulnerabilities and threats powered by dgraph

chen

Code Hierarchy Exploration Net (chen)

hub_scan

Scan reports for popular docker hub and gcr images

atom-tools

Collection of tools for use with AppThreat/atom.

atom-samples

Collection of atom, data-flow, and usage slices for appthreat/atom https://github.com/appthreat/atom.

docs

Docs that are published at https://appthreat.io

blint-action

Action to run BLint, the binary linter.

cdxgen-docs

Documentation repo for CycloneDX Generator (cdxgen)

rosa

An experiment that looks very promising so far.

.github

base-images

Container base images

caxa

Package Node.js applications into executable binaries. Forked from leafac/caxa.

cdx-hbom

cdx-proto

Runtime library to serialize/deserialize CycloneDX BOM with protocol buffers

charts

Helm charts for cloudsec apps

cpg2

cpggen-action

Generate CPG for multiple languages for use with joern

custom-json-diff

A utility to compare json documents containing dynamically-generated fields.

depscan-testing

node-stream-zip

node.js library for fast reading of large ZIPs

overflowdb2

vdb

Precompiled AppThreat vulnerability database for dep-scan

vuln-list-update

Collects vulnerability data from a range of sources.

WebGoat

WebGoat 8.0