AppThreat/joern-lib

This repository has been archived on 08/Jan/2024
Stars
13
Rank 1,512,713 (Top 30 %)
Language
Jupyter Notebook
License
Apache License 2.0
Created almost 2 years ago
Updated over 1 year ago

AppThreat/joern-lib

AppThreat

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Python library for code analysis with CPG and Joern

dep-scan

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

sast-scan

Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!

vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm.

atom

Atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

blint

BLint is a Binary Linter to check the security properties, and capabilities in your executables. It is powered by lief.

sast-scan-action

GitHub action for performing SAST scanning using various oss tools such as gitleaks, bandit, findsecbugs etc

cpggen

Generate CPG for multiple languages for code and threat analysis

dep-scan-action

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. No server required!

vuln-list

Subset of https://github.com/aquasecurity/vuln-list suitable for dep-scan

threat-db

A graph database for components, vulnerabilities and threats powered by dgraph

hub_scan

Scan reports for popular docker hub and gcr images

atom-tools

Collection of tools for use with AppThreat/atom.

atom-samples

Collection of atom, data-flow, and usage slices for appthreat/atom.

docs

Docs that are published at https://appthreat.io

cdxgen-docs

Documentation repo for CycloneDX Generator (cdxgen)

blint-action

Action to run BLint, the binary linter.

scan-reports

Library for producing gorgeous html reports from AppThreat scan results. Compatible with SARIF and grafeas format.

cve-annotations

UNUSED: Community powered annotations for CVE to identify source, sink, exploits and other information.

rosa

An experiment that looks very promising so far.

depscan-bin

Binary builds for dep-scan - The Dependency Scanner