Skip to content

@RedHatProductSecurity Red Hat Product Security

Change the repository type filter

All

    Repositories list

    43 repositories

    • trestle-bot

      Public
      A workflow automation tool for `compliance-trestle`
      Python
      •
      Apache License 2.0
      •12•8•19•15•Updated Dec 18, 2024Dec 18, 2024

    • osidb-bindings

      Public
      A client library for accessing OSIDB API
      Python
      •
      MIT License
      •1•4•5•0•Updated Dec 18, 2024Dec 18, 2024

    • osidb

      Public
      OSIDB — Open Security Issue Database
      Python
      •
      MIT License
      •9•28•0•5•Updated Dec 18, 2024Dec 18, 2024

    • rapidast

      Public
      RapiDAST enables simple, continuous and fully automated application security testing
      security-testingsecurity-automationdevsecops
      Python
      •
      Apache License 2.0
      •39•60•2•13•Updated Dec 18, 2024Dec 18, 2024

    • osim

      Public
      Web UI for interacting with OSIDB
      TypeScript
      •
      MIT License
      •6•6•0•4•Updated Dec 16, 2024Dec 16, 2024

    • deplist

      Public
      Go
      •
      Apache License 2.0
      •11•3•5•2•Updated Dec 9, 2024Dec 9, 2024

    • cvelib

      Public
      A Python library and command line interface for CVE Services.
      securitypython3cve
      Python
      •
      MIT License
      •24•60•0•0•Updated Dec 6, 2024Dec 6, 2024

    • security-data-guidelines

      Public
      A set of documents detailing Red Hat's publishing of security data.
      Python
      •
      MIT License
      •2•4•1•2•Updated Nov 25, 2024Nov 25, 2024

    • osim-ui-tests

      Public
      OSIM integration tests
      TypeScript
      •
      MIT License
      •0•0•0•0•Updated Nov 25, 2024Nov 25, 2024

    • component-registry

      Public
      Component Registry (Corgi) aggregates component data across Red Hat's supported products, managed services, and internal product pipeline services.
      Python
      •
      MIT License
      •8•18•0•3•Updated Nov 22, 2024Nov 22, 2024

    • compliance-to-policy

      Public
      Fork of Compliance-to-Policy (C2P) provides the framework to bridge the gap between compliance and policy administration.
      Go
      •
      Apache License 2.0
      •16•1•0•0•Updated Nov 18, 2024Nov 18, 2024

    • trestle-demo

      Public template
      Demo workflows for continuous compliance with OSCAL content and compliance-trestle
      oscal
      Makefile
      •
      Apache License 2.0
      •5•5•2•1•Updated Nov 5, 2024Nov 5, 2024

    • cvss

      Public
      CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
      Python
      •
      GNU Lesser General Public License v3.0
      •30•88•5•0•Updated Nov 1, 2024Nov 1, 2024

    • cvss-v4-calculator

      Public
      CVSS v4.0 calculator
      cvsssecurity-tools
      JavaScript
      •
      BSD 2-Clause "Simplified" License
      •30•36•3•0•Updated Nov 1, 2024Nov 1, 2024

    • cve-golib

      Public archive
      go client for working with Red Hat Security Data API https://access.redhat.com/documentation/en-us/red_hat_security_data_api/1.0/
      Go
      •
      GNU General Public License v3.0
      •3•4•0•0•Updated Oct 29, 2024Oct 29, 2024

    • oscal-component-definitions

      Public
      OSCAL Component Definition Library
      oscal
      Other
      •5•7•0•12•Updated Oct 28, 2024Oct 28, 2024

    • oscal-compliance-prototype

      Public
      Python
      •
      Apache License 2.0
      •0•1•0•1•Updated Oct 25, 2024Oct 25, 2024

    • oscal-profiles

      Public
      OSCAL Profile Library
      Python
      •
      Other
      •3•7•1•2•Updated Sep 13, 2024Sep 13, 2024

    • advisory-parser

      Public
      A library for parsing security advisories
      securityparsing-librarysecurity-advisories
      HTML
      •
      GNU Lesser General Public License v3.0
      •12•13•1•1•Updated Sep 2, 2024Sep 2, 2024

    • openlcs

      Public
      Open License and Crypto Scanner
      redispythondjangocelery
      Python
      •
      MIT License
      •2•9•0•0•Updated Aug 15, 2024Aug 15, 2024

    • jenkins-trestlebot-jobs

      Public
      Jenkins job examples with trestle-bot
      Apache License 2.0
      •0•0•0•0•Updated Aug 9, 2024Aug 9, 2024

    • oscal-automation-libs

      Public archive
      Shell
      •
      Apache License 2.0
      •2•2•0•0•Updated Aug 8, 2024Aug 8, 2024

    • compliance-trestle

      Public
      An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
      Python
      •
      Apache License 2.0
      •61•1•0•0•Updated Jul 10, 2024Jul 10, 2024

    • OSCAL

      Public
      Fork of Open Security Controls Assessment Language (OSCAL)
      XSLT
      •
      Other
      •185•0•0•0•Updated Jun 7, 2024Jun 7, 2024

    • component-registry-bindings

      Public
      A client library for accessing Component Registry API
      Python
      •
      MIT License
      •1•1•0•0•Updated Jun 3, 2024Jun 3, 2024

    • scancode-toolkit

      Public
      🔍 Fork of ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
      Python
      •560•0•0•0•Updated May 20, 2024May 20, 2024

    • LicenseScanner

      Public
      Shell
      •1•0•0•0•Updated May 16, 2024May 16, 2024

    • griffon

      Public archive
      Red Hat Product Security CLI
      Python
      •
      MIT License
      •1•7•0•0•Updated Feb 13, 2024Feb 13, 2024

    • rapidast-results-parser

      Public
      Small Python script used to parse the results provided from Rapidast
      Python
      •
      MIT License
      •0•0•0•0•Updated Dec 4, 2023Dec 4, 2023

    • rhubarb

      Public
      Exclusive, robust and deadlock-free task execution for celery
      Python
      •
      MIT License
      •0•2•1•0•Updated Nov 29, 2023Nov 29, 2023