OWASP depscan
OWASP depscan is an open-source security audit based on known vulnerabilities and advisories for project dependencies. Supports both local repos and container images. Integrates with various CI environments such as GitHub Action, Azure Pipelines, CircleCI, Jenkins, and Google CloudBuild.
OWASP CycloneDX Generator
cdxgen is a cli tool, library, REPL, and server to create a valid and compliant CycloneDX Software Bill-of-Materials (SBOM) containing an aggregate of all project dependencies for c/c++, node.js, php, python, ruby, rust, java, .Net, dart, haskell, elixir, and Go projects in JSON format.
Blint
BLint is a Binary Linter to check executable binaries' security properties and capabilities.
Atom
AppThreat atom - an intermediate representation for next-generation application and dependency analysis.
