anchore/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Explore GitHub Trending repositories tagged “static-analysis”.
Every repository shown here comes from the PostgreSQL Trending catalog.
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
A static analyzer for Java, C, C++, and Objective-C
This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.