A collection of higher-level reusable cdk constructs

三方依赖库扫描系统

Dependency Check Azure DevOps Extension

Context-Aware-Jenkins-Job-Transfer (Jobs, Views, Plugins) between Jenkins Servers.

Tool for analyzing behavior change risk in golang module updates

A Danger plugin to detect if there are any updates to your Swift Package Manager dependencies.

OWASP DependencyCheck as one image

OWASP DependencyCheck Cake Package

Exemplo de uso do dependency check com sonar

A secure Python-based code scanner for open-source repositories.

GitHub Action Workflow for go dependency update inpact analysis

Maven plugin for scanning source code with combination of dependency-check, checkstyle, spotbugs, pmd and generate reports for SonarQube

PyUpdater is a Python CLI that detects outdated packages by comparing installed versions with PyPI. It uses SemVer to flag safe vs breaking updates, supports table/JSON/CSV outputs, batch processing with rate limits, and integrates with CI/CD for automated dependency checks.

Static analysis of Java application dependencies

An AppSec cat attempts to eat the AppSec dog food: CI edition

🚀 Free vulnerability scanner for Maven projects. Detect CVEs, track security trends, and generate comprehensive reports. Built on OWASP Dependency-Check with enterprise-grade performance.

End-to-End CI/CD pipeline for a Java-based Shopping Cart application using Jenkins, Maven, SonarQube, OWASP Dependency Check, and Docker.The pipeline automates code compilation, security scanning, static code analysis, Docker image creation, and deployment.This project demonstrates hands-on DevOps practices for building, testing, and deploying app.

Repository untuk tugas DevSecOps Week6 — Software Composition Analysis (SCA)

Digital wallet full stack application developed with Next.js and Node.js