owasp-dep-scan / dep-scan
git clone https://github.com/owasp-dep-scan/dep-scan.git
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
—
stars, 24h
—
stars, 7 days
—
stars, 30 days
1.3k
★ total
138
forks · 82 open issues
Star history starts 2026-10-20; the chart appears after the second daily snapshot.
LanguagePython
LicenseMIT
Created2020-01-28 (6y ago)
Last push6d ago
OwnerOrganization
GitHub topics
compliancecontainerscvecyclonedxdependency-analysisdependency-auditdevsecopsreachability-analysisrisk-auditsbomscasecurity-auditsecurity-toolssupply-chain-securityvexvulnerability-scanners
Links
- GitHub: github.com/owasp-dep-scan/dep-scan
- Homepage: https://depscan.readthedocs.io
- Releases · Issues · Hacker News mentions