Become a sponsor to prabhu
I am building several application security and threat intelligence tools under the umbrella "AppThreat". Some of my work includes
- dep-scan - Fully open-source security audit based on known vulnerabilities and advisories for project dependencies. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI, and Google CloudBuild. No server is required!
- cdxgen - a tool to effortlessly produce software bill-of-materials and submit to a suitable server such as dependency-track for open-source software (OSS) scanning
Featured work
-
AppThreat/vulnerability-db
Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.
Python 155 -
owasp-dep-scan/blint
blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.
Python 467 -
AppThreat/atom
atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
Scala 100 -
AppThreat/chen
Code Hierarchy Exploration Net (chen)
Scala 37 -
owasp-dep-scan/dosai
Dotnet Source and Assembly Inspector (Dosai) is a tool to list details about the namespaces and methods from sources and assemblies.
C# 14 -
cdxgen/caxa
Package Node.js applications into executable binaries.
Rust 13