IcebergAI

IcebergAI/IcebergSCA

Software composition analysis CLI — lockfile-first dependency scanning across seven ecosystems, checked against OSV, with SARIF and CycloneDX output.

2 good first / help-wanted issues · Python · last activity Jul 28, 2026

0 stars 0 forks 0 watchers Python Apache License 2.0
cli cyclonedx dependency-scanning developer-tools osv python sarif sbom sca security supply-chain-security vulnerability-scanner
View on GitHub Website
2 Open Issues Need Help Last updated: Jul 28, 2026

Open Issues Need Help

View All on GitHub
Generation Context: say that these SBOMs are pre-build source analysis, and stop inventing a tool version 3 months ago
enhancement good first issue
IcebergAI/IcebergSCA
0

Software composition analysis CLI — lockfile-first dependency scanning across seven ecosystems, checked against OSV, with SARIF and CycloneDX output.

Python
#cli#cyclonedx#dependency-scanning#developer-tools#osv#python#sarif#sbom#sca#security#supply-chain-security#vulnerability-scanner
Malicious packages are indistinguishable from ordinary CVEs in the table renderer 3 months ago
bug good first issue
IcebergAI/IcebergSCA
0

Software composition analysis CLI — lockfile-first dependency scanning across seven ecosystems, checked against OSV, with SARIF and CycloneDX output.

Python
#cli#cyclonedx#dependency-scanning#developer-tools#osv#python#sarif#sbom#sca#security#supply-chain-security#vulnerability-scanner