Red Hat Product Security

cvss

CVSS2/3/4 library with interactive calculator for Python 2 and Python 3

cvelib

A Python library and command line interface for CVE Services.

rapidast

RapiDAST enables simple, continuous and fully automated application security testing

cvss-v4-calculator

CVSS v4.0 calculator

osidb

OSIDB — Open Security Issue Database

component-registry

Component Registry (Corgi) aggregates component data across Red Hat's supported products, managed services, and internal product pipeline services.

advisory-parser

A library for parsing security advisories

openlcs

Open License and Crypto Scanner

trestle-bot

A workflow automation tool for `compliance-trestle`

griffon

Red Hat Product Security CLI

oscal-component-definitions

OSCAL Component Definition Library

oscal-profiles

OSCAL Profile Library

osim

Web UI for interacting with OSIDB

trestle-demo

Demo workflows for continuous compliance with OSCAL content and compliance-trestle

cve-golib

go client for working with Red Hat Security Data API https://access.redhat.com/documentation/en-us/red_hat_security_data_api/1.0/

osidb-bindings

A client library for accessing OSIDB API

security-data-guidelines

A set of documents detailing Red Hat's publishing of security data.

deplist

oscal-automation-libs

rhubarb

Exclusive, robust and deadlock-free task execution for celery

compliance-to-policy

Fork of Compliance-to-Policy (C2P) provides the framework to bridge the gap between compliance and policy administration.

compliance-trestle

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

component-registry-bindings

A client library for accessing Component Registry API

oscal-compliance-prototype

jenkins-trestlebot-jobs

Jenkins job examples with trestle-bot

LicenseScanner

OSCAL

Fork of Open Security Controls Assessment Language (OSCAL)

osim-ui-tests

OSIM integration tests

rapidast-results-parser

Small Python script used to parse the results provided from Rapidast

scancode-toolkit

:mag: Fork of ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!