bomber - a vulnerability scanner for SBOMs

• bomber

  4 453 7.1 Go

  Scans Software Bill of Materials (SBOMs) for security vulnerabilities

  

• osv.dev

  19 1,405 9.7 Python

  Open source vulnerability DB and triage service.

  

npm audit will report packages that have known vulnerabilities reported here: https://osv.dev/. Bomber uses synk’s OSS index so it will report a subset of the results of what snyk would. The fact that bomber is written in go and snyk’s cli is in js probably means scanning for dependencies will be faster, but i haven’t actually benchmarked that.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project