S

SBOM

BETA: Dependency Scanning for supported projects

Analyzer that scans for application dependencies.

A package for installation into .Net projects, for reporting data to a Metaport server.

Gitlab CI/CD template that facilitates scan targets against security issues

A package for installation into Python web-projects, for reporting data to a Metaport server.

Kubernetes-native Helm auditor for supply chain security, aggregating SBOM, vulnerability, and provenance data.

A package for installation into NodeJS web-projects, for reporting data to a Metaport server.

A package for installation into PHP web-projects, for reporting data to a Metaport server.

Integrate SCANOSS Platform with Gitlab

CI/CD component to extract SBOMs from GitLab projects.

An end to end DevSecOps pipeline with features including SAST Scanning of the Source code, SBOM management, and Container image scan, before pushing to EKS.

VEX exporter for GitLab projects using Dependency Scanning

This project illustrates the use of metaeffekt Kontinuum within Gitlab.