supply-chain

Star

Here are 597 public repositories matching this topic...

Language:All

Filter by language

All597 JavaScript114 Python97 Jupyter Notebook80 Go34 TypeScript30 HTML27 Java27 Shell13 Rust12 Solidity12

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

doublechaintech /scm-biz-suite

Star2.6k

供应链中台系统基础版，集成零售管理, 电子商务, 供应链管理, 财务管理, 车队管理, 仓库管理, 人员管理, 产品管理, 订单管理, 会员管理, 连锁店管理, 加盟管理, 前端React/Ant Design, 后端Java Spring+自有开源框架，全面支持MySQL, PostgreSQL, 全面支持国产数据库南大通用GBase 8s,通过REST接口调用，前后端完全分离。

mysql java redis ecommerce spring erp supply-chain knowledge-graph tms antd retail scm echarts fleet-management warehouse-management ordermanagement digital-transformation oracle-atg-alternative headless-commerce

UpdatedMar 12, 2024
Java

openclarity /openclarity

Star1.4k

OpenClarity is an open source tool built to enhance security and observability of cloud native applications and infrastructure

kubernetes security cloud virtual-machine scanner malware supply-chain exploits vulnerabilities rootkits leaked-secrets sbom

UpdatedMar 17, 2025
Go

guacsec /guac

Star1.3k

GUAC aggregates software security metadata into a high fidelity graph database.

security graph supply-chain vulnerability vex spdx vulnerability-management software-supply-chain supply-chain-analytics sbom attestations in-toto cyclonedx slsa supply-chain-security supply-chain-visibility software-supply-chain-security spdx-sbom cyclonedx-sbom

UpdatedMar 17, 2025
Go

ikatsov /tensor-house

Star1.3k

A collection of reference Jupyter notebooks and demo AI/ML applications for enterprise use cases: marketing, pricing, supply chain, smart manufacturing, and more.

marketing data-science machine-learning reinforcement-learning ai deep-learning models supply-chain personalization customer-analysis llm

UpdatedJan 24, 2024
Jupyter Notebook

coreinfrastructure /best-practices-badge

Star1.3k

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

rails open-source security best-practices foss supply-chain badge floss ossf openssf

UpdatedMar 13, 2025
Ruby

pypa /pip-audit

Sponsor

Star1k

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

python security security-audit supply-chain pip

UpdatedFeb 26, 2025
Python

sigstore /rekor

Star941

Software Supply Chain Transparency Log

security supply-chain provenance transparency-log

UpdatedMar 17, 2025
Go

in-toto /in-toto

Star904

in-toto is a framework to protect supply chain integrity.

security supply-chain new-york-university secure-systems-lab

UpdatedMar 17, 2025
Python

endojs /endo

Star867

Endo is a distributed secure JavaScript sandbox, based on SES

javascript security multi-tenant sandbox supply-chain capabilities hardened ocaps powerbox prototype-pollution captp

UpdatedMar 18, 2025
JavaScript

ossillate-inc /packj

Star662

Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

python npm security rubygems devops security-audit static-analysis pypi malware supply-chain sandboxing developer-tools dynamic-analysis vulnerability malware-analysis devops-tools vulnerability-scanners security-tools devsecops supply-chain-security

UpdatedApr 2, 2024
Python

theupdateframework /go-tuf

Star652

Go implementation of The Update Framework (TUF)

go golang security chain supply-chain software supply hacktoberfest tuf

UpdatedMar 13, 2025
Go

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. GPT:https://chatgpt.com/g/g-673bfeb4037481919be8a2cd1bf868d2-cdxgen

docker containers supply-chain owasp bom oci sca software-bill-of-materials purl package-url sbom cyclonedx saasbom cbom

UpdatedMar 18, 2025
JavaScript

devops-kung-fu /bomber

Sponsor

Star553

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

golang security oss supply-chain spdx vulnerability-scanners security-automation security-tools devsecops supplychain syft sbom gomodule cyclonedx epss

UpdatedMar 13, 2025
Go

sigstore /sigstore

Star474

Common go library shared across sigstore services and clients

go golang security supply-chain cosign sigstore

UpdatedMar 17, 2025
Go

sandworm-hq /sandworm-audit

Sponsor

Star471

Security & License Compliance For Your App's Dependencies 🪱

cli security supply-chain audit vulnerability compliance vulnerabilities dependencies license-management vulnerability-scanners d3-visualization license-checking security-tools license-compliance dependencies-tree sbom dependencies-graph

UpdatedSep 1, 2024
JavaScript

in-toto /witness

Star429

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

security supply-chain verification attestation security-tools

UpdatedMar 17, 2025
Go

hubbs5 /or-gym

Star394

Environments for OR and RL Research

reinforcement-learning optimization supply-chain deep-reinforcement-learning vehicle-routing-problem operations-research supply-chain-management

UpdatedOct 12, 2023
Python

CycloneDX /specification

Star387

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX