2 Repos
Prompt-based systems for reviewing, hiding, or keeping findings with decisions saved for future runs.
Distinct from Security Finding Management: Distinct from Security Finding Management: focuses on interactive, per-finding decision prompts rather than bulk lifecycle management.
Explore 2 awesome GitHub repositories matching security & cryptography · Interactive Triage Workflows. Refine with filters or upvote what's useful.
Prompts users to hide or keep each finding, saving decisions to a database for future analysis runs.
Dependency-Track is a software composition analysis tool and vulnerability management system designed to track dependencies and supply chain risk. It functions as a platform for ingesting and analyzing CycloneDX software bills of materials to identify known vulnerabilities and license compliance issues within third-party software components. The system distinguishes itself by mirroring external vulnerability databases locally to enable fast offline analysis and using VEX documents to differentiate between technical vulnerabilities and actual contextual risks. It also integrates with identity
Provides workflows for reviewing security findings and documenting the resolution process with audit history.