2 repository-uri
Tools and processes for monitoring third-party software components.
Distinguishing note: Focuses on tracking and inventory rather than active vulnerability patching.
Explore 2 awesome GitHub repositories matching devops & infrastructure · Dependency Tracking. Refine with filters or upvote what's useful.
The OWASP Cheat Sheet Series is a comprehensive, community-driven repository of concise security best practices and defensive coding patterns. It serves as a centralized knowledge base for developers and security professionals, providing actionable guidance to secure applications across the entire software development lifecycle. The project covers a vast array of security domains, ranging from fundamental web application hardening and authentication protocols to specialized controls for modern infrastructure and artificial intelligence systems. What distinguishes this project is its decentral
Monitors third-party components to identify risks from vulnerable or outdated libraries.
Renovate is a GitOps-driven dependency management engine designed to automate the maintenance of software projects. It functions as an automated update tool that scans repository files to identify outdated dependencies, fetches the latest compatible versions from external sources, and generates pull requests to apply those updates. By integrating directly with code hosting platforms, it synchronizes project dependencies through declarative configuration files, ensuring that software components remain current and secure. The project distinguishes itself through its platform-agnostic architectu
Defines custom patterns to locate and track dependencies in non-standard or proprietary file formats.