Red Hat Product Security

cvss

CVSS2/3/4 library with interactive calculator for Python 2 and Python 3

cvelib

A Python library and command line interface for CVE Services.

rapidast

RapiDAST enables simple, continuous and fully automated application security testing

cvss-v4-calculator

CVSS v4.0 calculator

osidb

OSIDB — Open Security Issue Database

component-registry

Component Registry (Corgi) aggregates component data across Red Hat's supported products, managed services, and internal product pipeline services.

advisory-parser

A library for parsing security advisories

openlcs

Open License and Crypto Scanner

griffon

Red Hat Product Security CLI

oscal-component-definitions

OSCAL Component Definition Library

oscal-profiles

OSCAL Profile Library

trestle-bot

A workflow automation tool for `compliance-trestle`

trestle-demo

Demo workflows for continuous compliance with OSCAL content and compliance-trestle

deplist

osim

Web UI for interacting with OSIDB

osidb-bindings

A client library for accessing OSIDB API

rhubarb

Exclusive, robust and deadlock-free task execution for celery

component-registry-bindings

A client library for accessing Component Registry API

oscal-automation-libs

security-data-guidelines

A set of documents detailing Red Hat's publishing of security data.

cac-content

A fork of Compliance as Code content. Security automation content in SCAP, Bash, Ansible, and other formats

compliance-to-policy

Fork of Compliance-to-Policy (C2P) provides the framework to bridge the gap between compliance and policy administration.

compliance-trestle

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

django-mptt

Utilities for implementing a modified pre-order traversal tree in django.

LicenseScanner

OSCAL

Fork of Open Security Controls Assessment Language (OSCAL)

oscal-compliance-prototype

rapidast-results-parser

Small Python script used to parse the results provided from Rapidast

scancode-toolkit

:mag: Fork of ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

testbuild

temporary public repo for testing build pipelines