#software-supply-chain-security (8 Repositories)
Ranked open-source repositories tagged with #software-supply-chain-security, scored by pull request acceptance likelihood and maintainer engagement velocity.
53.7%
4.5h
8 repositories tagged #software-supply-chain-security
phylum-dev/cli
Command line interface for the Phylum API
guacsec/guac
GUAC aggregates software security metadata into a high fidelity graph database.
mindersec/minder
Software Supply Chain Security Platform
sbom-tool/sbom-tools
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
DataDog/malicious-software-packages-dataset
An open-source dataset of malicious software packages found in the wild.
in-toto/attestation
in-toto Attestation Framework
arnica/depsguard
Harden your package manager configs against supply chain attacks.
aquasecurity/chain-bench
An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.