Beast code in Giters

Rasmey SARETH's starred repositories

psqlgraph

Library for graph-like storage in postgresql using sqlalchemy

Language:PythonApache-2.02200

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

Language:PythonMIT95400

nebula

A distributed, fast open-source graph database featuring horizontal scalability and high availability

Language:C++Apache-2.01041100

vulnrichment

A repo to conduct vulnerability enrichment.

CC0-1.040900

transformers

🤗 Transformers: State-of-the-art Machine Learning for Pytorch, TensorFlow, and JAX.

Language:PythonApache-2.012955100

Open-ITDR

Authomize open solutions for partners and customers

Language:PythonMIT2800

Unified-Cybersecurity-Ontology

Unified Cybersecurity Ontology

8700

cyclonedx-node-yarn

Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.

Language:JavaScriptApache-2.01600

Torii

Torii ⛩️ is a simple, powerful and extensible open-source Internal Developer Portal

Language:TypeScriptGPL-3.017400

comunica

📬 A knowledge graph querying framework for JavaScript

Language:TypeScriptNOASSERTION41600

minder

Software Supply Chain Security Platform

Language:GoApache-2.022500

cyclonedx-python-lib

Python implementation of OWASP CycloneDX

Language:PythonApache-2.06100

s2c2f

The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously improve the S2C2F guide which outlines and defines how to securely consume Open Source Software (OSS) dependencies into the developer’s workflow.

NOASSERTION17000

witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

Language:GoApache-2.039600

archivista

Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

Language:GoApache-2.05600

pike

Pike is a tool for determining the permissions or policy required for IAC code

Language:GoApache-2.052800

podman-py

Python bindings for Podman's RESTful API

Language:PythonApache-2.023000

cvelist

Pilot program for CVE submission through GitHub. CVE Record Submission via Pilot PRs ending 6/30/2023

128000

transparency-exchange-api

A standard API specification for exchanging supply chain artifacts and intelligence

Apache-2.03500

sbom4python

A tool to generate a SBOM (Software Bill of Materials) for an installed Python module

Language:PythonApache-2.02400

specification

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

Language:XSLTApache-2.034400

Software-Supply-Chain-Security

A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from the web.

12100