Dependency Scanning

bundle-auditRuby

A security audit tool for Ruby projects that checks Gemfile.lock for vulnerable gem versions and insecure sources.

pip-auditPython

Audits Python environments, requirements files, and dependency trees for known security vulnerabilities and can automatically fix them.

SafeDep/vetGo

A CLI tool for real-time malicious package detection and software supply chain security across multiple ecosystems.

Snyk Test ActionHTML

A collection of GitHub Actions for Snyk to check projects for vulnerabilities across multiple languages and tools.

Continuous Distribution of Funding to your Project Contributors and DependenciesPython

A command-line tool for transparent, automated distribution of cryptocurrency donations to open-source contributors and dependencies via GitHub Actions.

licensirElixir

An Elixir mix task that lists the licenses of all installed packages in your Mix project.

ChainJackingPython

A tool to detect which Go dependencies are vulnerable to GitHub repository hijacking (RepoJacking) attacks.