ThalesGroup/oss-analyzer
Open Source security and compliance gate for GitLab CI and GitHub Actions: SBOM, dependency vulnerabilities, SAST, secrets, IaC and licenses, under one versioned policy and one verdict. No SaaS, no code sent to a third party.
GitHub repository with 10 stars and 0 forks.
Language: Python
Topics: cyclonedx, devsecops, github-actions, gitlab-ci, license-compliance, policy-as-code, sast, sbom, sca, secrets-detection