sbt-dependency-check
Vulnerability scanner
Automatically monitors dependencies for known vulnerabilities and generates reports on security issues
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 
266 stars
11 watching
35 forks
Language: Scala
last commit: about 2 years agoappseccvedevopsdevsecopsinfosecnvdowaspowasp-dependencychecksbtsbt-pluginscalasecuritysecurity-auditsecurity-automationsoftware-composition-analysissoftware-securitystatic-analysisvulnerabilitiesvulnerability-scanners
Related projects:
| Repository | Description | Stars |
|---|---|---|
 1n3/blackwidow | A Python-based web application scanner that gathers OSINT and fuzz data to identify OWASP vulnerabilities on target websites. | 1,545 |
 moduscreateorg/beep | An account security scanner that detects vulnerabilities in online accounts by hashing credentials and checking against data breaches. | 157 |
 trailofbits/it-depends | Automatically builds dependency graphs and Software Bills of Materials for packages and source code repositories. | 334 |
 sectooladdict/wavsep | An open-source tool for evaluating web application vulnerabilities by analyzing the separation of concerns in web applications. | 232 |
 sonatype-nexus-community/audit.net | Identifies security vulnerabilities in .NET NuGet dependencies during software development and maintenance | 55 |
 owasp/joomscan | Automated vulnerability scanner for Joomla CMS deployments to identify potential security issues. | 1,088 |
 baalmor/cve-ape | Automates CVE vulnerability scanning for Linux packages | 5 |
 cve-search/git-vuln-finder | Automates CVE vulnerability detection from Git commit messages | 402 |
 pyupio/safety | Detects known security vulnerabilities in Python dependencies and provides recommendations for remediation. | 1,758 |
 hasecuritysolutions/vulnwhisperer | Automates vulnerability scanning and reporting by integrating multiple scanners into a unified platform | 1,362 |
 albinowax/activescanplusplus | An extension plugin for Burp Suite's active and passive scanning capabilities to identify application behavior of interest to advanced testers | 612 |
 secdec/attack-surface-detector-burp | Identifies web app endpoints and parameters to help detect vulnerabilities | 98 |
| sonatype-nexus-community/auditjs | Tools to scan npm packages for known vulnerabilities and outdated dependencies. | 223 |
 mbalabash/sdc-check | An audit tool to identify potential security risks in dependencies | 140 |
 belane/linux-soft-exploit-suggester | A script to identify vulnerabilities in software packages on Linux systems | 222 |