Active Projects
These are our current active Open Source Projects.
AuditJS
javascript
nodejs
Scan JavaScript (node.js inclusive) projects for vulnerable third-party dependencies.
Works with:
Bach
php
composer
Scan PHP and Composer projects for vulnerable third-party dependencies.
Works with:
Chelsea
rubygems
Scan RubyGems powered projects for vulnerable third-party dependencies.
Works with:
Cheque
c
Scan C projects for vulnerable third-party dependencies.
Works with:
Jake
python
conda
pip
Scan Python and Conda environments for vulnerable third-party dependencies.
Works with:
Nancy
golang
Scan Golang projects for vulnerable third-party dependencies.
Works with:
OysterR
r
cran
Scan R code for vulnerable third-party dependencies.
Works with:
Pants
rust
cargo
Cargo subcommand provides a project bill of materials and identifies vulnerabilities.
Works with:
Sherlock Trunks
java
gradle
A Gradle plugin that scans the dependencies of a Gradle project for vulnerabilities.
Works with:
Sonatype Lifecycle GitHub Action
GRADUATED
ci
github
GitHub Action for invoking Sonatype Lifecycle scans.
Worked with:
The CLA Bot
cla
Also known as Paul Botsco - this is our CLA Bot.
Works with: