AppThreat

All

41 repositories

vuln-list
Public
Linux upstream vulnerabilities data suitable for dep-scan
Apache License 2.0
•0•13•0•0•Updated Nov 15, 2024Nov 15, 2024
vulnerability-db
Public
Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.
cli database cve nvd vulnerability-detection sca advisories vers purl vulnerability-database
Python
•
MIT License
•23•97•21•0•Updated Nov 15, 2024Nov 15, 2024
vdb
Public
Precompiled AppThreat vulnerability database for dep-scan
Shell
•
Apache License 2.0
•1•0•0•0•Updated Nov 15, 2024Nov 15, 2024
dep-scan-snapshots
Public
Testing snapshots for OWASP-dep-scan/dep-scan.
MIT License
•0•0•0•0•Updated Nov 15, 2024Nov 15, 2024
base-images
Public
Container base images for AppThreat sponsors and customers.
sponsors base-images sbom container-images cdxgen depscan blint
Java
•
MIT License
•0•0•3•0•Updated Nov 12, 2024Nov 12, 2024
blint-db
Public
Python
•2•1•0•1•Updated Nov 11, 2024Nov 11, 2024
custom-json-diff
Public
A utility to compare json documents containing dynamically-generated fields.
Python
•
Apache License 2.0
•0•0•4•0•Updated Nov 2, 2024Nov 2, 2024
cdxgen-samples
Public
CycloneDx/cdxgen snapshot repository.
Apache License 2.0
•0•0•0•1•Updated Oct 31, 2024Oct 31, 2024
caxa
Public
Package Node.js applications into executable binaries. Forked from leafac/caxa.
JavaScript
•
MIT License
•0•2•1•0•Updated Sep 24, 2024Sep 24, 2024
atom-samples
Public
Collection of atom, data-flow, and usage slices for appthreat/atom https://github.com/appthreat/atom.
Python
•
Apache License 2.0
•2•2•1•1•Updated Sep 24, 2024Sep 24, 2024
atom
Public
Atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
code-analysis supply-chain intermediate-representation variant-analysis vulnerability-analysis reachability-analysis application-analytics exploit-prediction
Rust
•
Apache License 2.0
•2•52•35•0•Updated Sep 22, 2024Sep 22, 2024
chen
Public
Code Hierarchy Exploration Net (chen)
dependency-analysis code-analysis code-hierarchy-representation
Scala
•
Apache License 2.0
•2•14•12•0•Updated Sep 22, 2024Sep 22, 2024
vuln-list-update
Public
Collects vulnerability data from a range of sources.
Go
•
Apache License 2.0
•0•0•0•0•Updated Sep 17, 2024Sep 17, 2024
atom-tools
Public
Collection of tools for use with AppThreat/atom.
Python
•
Apache License 2.0
•0•3•5•0•Updated Jun 28, 2024Jun 28, 2024
cdx-hbom
Public
Apache License 2.0
•0•0•0•0•Updated Apr 17, 2024Apr 17, 2024
cdx-proto
Public
Runtime library to serialize/deserialize CycloneDX BOM with protocol buffers
automation library typescript protobuf integration runtime sbom cyclonedx protobom
TypeScript
•
Apache License 2.0
•0•0•0•0•Updated Apr 13, 2024Apr 13, 2024
dep-scan-action
Public
Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. No server required!
MIT License
•3•8•0•1•Updated Feb 18, 2024Feb 18, 2024
depscan-testing
Public
0•0•0•0•Updated Feb 1, 2024Feb 1, 2024
cpg2
Public
Scala
•
Apache License 2.0
•0•0•0•0•Updated Jan 14, 2024Jan 14, 2024
overflowdb2
Public
Java
•
Apache License 2.0
•0•0•0•0•Updated Jan 14, 2024Jan 14, 2024
node-stream-zip
Public
node.js library for fast reading of large ZIPs
JavaScript
•
Other
•63•0•0•0•Updated Nov 12, 2023Nov 12, 2023
cpggen
Public archive
Generate CPG for multiple languages for code and threat analysis
security code-analysis joern cpg codepropertygraph
C#
•
Apache License 2.0
•0•9•6•0•Updated Sep 22, 2023Sep 22, 2023
cdxgen-docs
Public
Documentation repo for CycloneDX Generator (cdxgen)
Apache License 2.0
•0•1•0•0•Updated Sep 16, 2023Sep 16, 2023
blint-action
Public
Action to run BLint, the binary linter.
Apache License 2.0
•0•1•0•0•Updated Jul 14, 2023Jul 14, 2023
joern-lib
Public archive
Python library for code analysis with CPG and Joern
security library code-analysis appsec joern devsecops cpg sast codepropertygraph
Jupyter Notebook
•
Apache License 2.0
•1•13•6•0•Updated Jun 23, 2023Jun 23, 2023
.github
Public
Apache License 2.0
•0•0•0•0•Updated Jun 21, 2023Jun 21, 2023
cpggen-action
Public
Generate CPG for multiple languages for use with joern
Apache License 2.0
•0•0•0•0•Updated Jun 5, 2023Jun 5, 2023
rosa
Public
An experiment that looks very promising so far.
Python
•
Apache License 2.0
•0•1•0•0•Updated May 30, 2023May 30, 2023
docs
Public
Docs that are published at https://appthreat.io
Apache License 2.0
•0•2•0•0•Updated Mar 11, 2023Mar 11, 2023
threat-db
Public
A graph database for components, vulnerabilities and threats powered by dgraph
security-audit vex threat-analysis sbom
Python
•
Apache License 2.0
•1•7•0•0•Updated Feb 9, 2023Feb 9, 2023