AppThreat/rosa

Stars
1
Language
Python
License
Apache License 2.0
Created almost 2 years ago
Updated over 1 year ago

AppThreat/rosa

AppThreat

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

An experiment that looks very promising so far.

dep-scan

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

sast-scan

Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!

vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm.

atom

Atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

joern-lib

Python library for code analysis with CPG and Joern

Jupyter Notebook

blint

BLint is a Binary Linter to check the security properties, and capabilities in your executables. It is powered by lief.

sast-scan-action

GitHub action for performing SAST scanning using various oss tools such as gitleaks, bandit, findsecbugs etc

cpggen

Generate CPG for multiple languages for code and threat analysis

dep-scan-action

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. No server required!

vuln-list

Subset of https://github.com/aquasecurity/vuln-list suitable for dep-scan

threat-db

A graph database for components, vulnerabilities and threats powered by dgraph

hub_scan

Scan reports for popular docker hub and gcr images

atom-tools

Collection of tools for use with AppThreat/atom.

atom-samples

Collection of atom, data-flow, and usage slices for appthreat/atom.

docs

Docs that are published at https://appthreat.io

cdxgen-docs

Documentation repo for CycloneDX Generator (cdxgen)

blint-action

Action to run BLint, the binary linter.

scan-reports

Library for producing gorgeous html reports from AppThreat scan results. Compatible with SARIF and grafeas format.

cve-annotations

UNUSED: Community powered annotations for CVE to identify source, sink, exploits and other information.

depscan-bin

Binary builds for dep-scan - The Dependency Scanner