
bumblebee
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software…

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software…

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

Protects software supply chain integrity by verifying each step is performed by authorized functionaries, using signed layout and link metadata.

Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.

VEX Repository Specification

go CVE-2023-24538 patch issue resolver - Dunfell

go CVE-2023-24538 patch issue resolver - Kirkstone