Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update README.md #4

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update README.md #4

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,7 @@ Curated list of security tools

## Mutliple Languages

- [Vulert](https://vulert.com/) 💰 - Vulert continuously monitors open-source dependencies for vulnerabilities, recommends fixes, and ensures license compliance—all without needing installation or codebase access. It supports all major programming languages.
- [Synk](https://snyk.io/) 💰 - Automatically find, prioritize and fix vulnerabilities in your open source dependencies throughout your development process
- [Aqua](https://www.aquasec.com/products/container-vulnerability-scanning/) 💰 - Aqua’s CyberCenter feed is updated daily, providing extensive OS and programming language coverage, application dependency detection, and reduction in false positives and false negatives based on proprietary algorithms reconciling multiple sources (NVD, vendor advisories, and Aqua research)
- [Hawkeye](https://github.com/hawkeyesec/scanner-cli) - The Hawkeye scanner-cli is a project security, vulnerability and general risk highlighting tool. It is meant to be integrated into your pre-commit hooks and your pipelines.
Expand All @@ -71,6 +72,7 @@ Most of the above tools have plugins support. Below are the some of the plugins.

# SCA

- [Vulert](https://vulert.com/) - Vulert continuously monitors open-source dependencies for vulnerabilities, recommends fixes, and ensures license compliance—all without needing installation or codebase access. It supports all major programming languages.
- [OWASP Dependency Track](https://dependencytrack.org/) - Continuous Component Analysis Platform
- [Nexus lifecycle](https://www.sonatype.com/nexus/lifecycle) - Take full control of your software supply chain with Nexus Lifecycle. Integrate precise and accurate component intelligence directly into the development tools.
- [WhiteHat Sentinel SCA](https://www.whitehatsec.com/platform/software-composition-analysis/) - Analyzes applications for third parties and open source software to detect illegal, dangerous, or outdated code. Accelerate the time-to-market for your applications by safely and confidently utilizing open source code.
Expand Down Expand Up @@ -175,6 +177,7 @@ Most of the above tools have plugins support. Below are the some of the plugins.

# OSS License Scanner

- [Vulert](https://vulert.com) - Vulert continuously monitors open-source dependencies for vulnerabilities, recommends fixes, and ensures license compliance—all without needing installation or codebase access. It supports all major programming languages.
- [License Finder](https://github.com/pivotal/LicenseFinder) - LicenseFinder works with your package managers to find dependencies, detect the licenses of the packages in them, compare those licenses against a user-defined list of permitted licenses, and give you an actionable exception report.
- [Fossa](https://fossa.com/) 💰 - Get continuous compliance with code SCA featuring audit-grade reporting and comprehensive dependency inventory.
- [WhiteSource](https://www.whitesourcesoftware.com/) 💰 - Detect and remediate open source security and compliance issues in real-time, without the headache
Expand All @@ -189,6 +192,7 @@ Most of the above tools have plugins support. Below are the some of the plugins.

# Container Scanner

- [Vulert](https://vulert.com) - Vulert continuously monitors docker images for vulnerabilities, recommends fixes —all without needing installation or codebase access. It supports all major programming languages.
- [Trivy](https://github.com/aquasecurity/trivy) The most comprehensive and easy-to-use open source vulnerability scanner for container images
- [Anchore inline-scan container](https://github.com/anchore/ci-tools) - Anchore container analysis and scan provided as inline scanner
- [grype](https://github.com/anchore/grype) A vulnerability scanner for container images and filesystems
Expand Down