homeofe/supply-chain-guard

Official Docker image on GHCR (multi-arch) about 3 hours ago

enhancement help wanted

5

Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 180+ threat indicators. CycloneDX SBOMs, SLSA verification, attack-chain correlation.

TypeScript

#cli#cyclonedx#devsecops#docker#elvatis#github-action#glassworm#golang#malware-detection#npm#pypi#rust#sarif#sbom#scanner#security#slsa#supply-chain#threat-intelligence

examples/: Azure Pipelines recipe about 3 hours ago

documentation good first issue

homeofe/supply-chain-guard

5

Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 180+ threat indicators. CycloneDX SBOMs, SLSA verification, attack-chain correlation.

TypeScript

#cli#cyclonedx#devsecops#docker#elvatis#github-action#glassworm#golang#malware-detection#npm#pypi#rust#sarif#sbom#scanner#security#slsa#supply-chain#threat-intelligence

examples/: Jenkins pipeline recipe about 3 hours ago

documentation good first issue

homeofe/supply-chain-guard

5

Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 180+ threat indicators. CycloneDX SBOMs, SLSA verification, attack-chain correlation.

TypeScript

#cli#cyclonedx#devsecops#docker#elvatis#github-action#glassworm#golang#malware-detection#npm#pypi#rust#sarif#sbom#scanner#security#slsa#supply-chain#threat-intelligence

examples/: CircleCI recipe about 3 hours ago

documentation good first issue

homeofe/supply-chain-guard

5

Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 180+ threat indicators. CycloneDX SBOMs, SLSA verification, attack-chain correlation.

TypeScript

#cli#cyclonedx#devsecops#docker#elvatis#github-action#glassworm#golang#malware-detection#npm#pypi#rust#sarif#sbom#scanner#security#slsa#supply-chain#threat-intelligence

Coverage reporting and threshold gate in CI about 3 hours ago

good first issue

homeofe/supply-chain-guard

5

Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 180+ threat indicators. CycloneDX SBOMs, SLSA verification, attack-chain correlation.

TypeScript

#cli#cyclonedx#devsecops#docker#elvatis#github-action#glassworm#golang#malware-detection#npm#pypi#rust#sarif#sbom#scanner#security#slsa#supply-chain#threat-intelligence

Shields.io endpoint badge output (--format badge) about 3 hours ago

good first issue

homeofe/supply-chain-guard

5

Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 180+ threat indicators. CycloneDX SBOMs, SLSA verification, attack-chain correlation.

TypeScript

#cli#cyclonedx#devsecops#docker#elvatis#github-action#glassworm#golang#malware-detection#npm#pypi#rust#sarif#sbom#scanner#security#slsa#supply-chain#threat-intelligence

pre-commit framework hook (.pre-commit-hooks.yaml) about 3 hours ago

good first issue

homeofe/supply-chain-guard

5

Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 180+ threat indicators. CycloneDX SBOMs, SLSA verification, attack-chain correlation.

TypeScript

#cli#cyclonedx#devsecops#docker#elvatis#github-action#glassworm#golang#malware-detection#npm#pypi#rust#sarif#sbom#scanner#security#slsa#supply-chain#threat-intelligence

Open VSX registry support for the VS Code extension scanner about 3 hours ago

good first issue ecosystem

homeofe/supply-chain-guard

5

Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud and 180+ threat indicators. CycloneDX SBOMs, SLSA verification, attack-chain correlation.

TypeScript

#cli#cyclonedx#devsecops#docker#elvatis#github-action#glassworm#golang#malware-detection#npm#pypi#rust#sarif#sbom#scanner#security#slsa#supply-chain#threat-intelligence

Open Issues Need Help