Pinned Repositories
Certificates-Shipped
A list of certificates shipped by various vendors and Open Source Projects
component-registry
Component Registry (Corgi) aggregates component data across Red Hat's supported products, managed services, and internal product pipeline services.
CVE-HOWTO
CVE assignment documentation
cvelib
A Python library and command line interface for CVE Services.
cvss
CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
cvss-v4-calculator
CVSS v4.0 calculator
osidb
OSIDB — Open Security Issue Database
rapidast
RapiDAST enables simple, continuous and fully automated application security testing
security-data-guidelines
A set of documents detailing Red Hat's publishing of security data.
vulnerability-detection-scripts
Vulnerability detection scripts for Red Hat Enterprise Linux
RedHatProductSecurity's Repositories
RedHatProductSecurity/cvss
CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
RedHatProductSecurity/cvelib
A Python library and command line interface for CVE Services.
RedHatProductSecurity/rapidast
RapiDAST enables simple, continuous and fully automated application security testing
RedHatProductSecurity/cvss-v4-calculator
CVSS v4.0 calculator
RedHatProductSecurity/osidb
OSIDB — Open Security Issue Database
RedHatProductSecurity/component-registry
Component Registry (Corgi) aggregates component data across Red Hat's supported products, managed services, and internal product pipeline services.
RedHatProductSecurity/advisory-parser
A library for parsing security advisories
RedHatProductSecurity/openlcs
Open License and Crypto Scanner
RedHatProductSecurity/trestle-bot
A workflow automation tool for `compliance-trestle`
RedHatProductSecurity/griffon
Red Hat Product Security CLI
RedHatProductSecurity/oscal-component-definitions
OSCAL Component Definition Library
RedHatProductSecurity/oscal-profiles
OSCAL Profile Library
RedHatProductSecurity/osim
Web UI for interacting with OSIDB
RedHatProductSecurity/trestle-demo
Demo workflows for continuous compliance with OSCAL content and compliance-trestle
RedHatProductSecurity/cve-golib
go client for working with Red Hat Security Data API https://access.redhat.com/documentation/en-us/red_hat_security_data_api/1.0/
RedHatProductSecurity/osidb-bindings
A client library for accessing OSIDB API
RedHatProductSecurity/security-data-guidelines
A set of documents detailing Red Hat's publishing of security data.
RedHatProductSecurity/deplist
RedHatProductSecurity/oscal-automation-libs
RedHatProductSecurity/rhubarb
Exclusive, robust and deadlock-free task execution for celery
RedHatProductSecurity/compliance-to-policy
Fork of Compliance-to-Policy (C2P) provides the framework to bridge the gap between compliance and policy administration.
RedHatProductSecurity/compliance-trestle
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
RedHatProductSecurity/component-registry-bindings
A client library for accessing Component Registry API
RedHatProductSecurity/oscal-compliance-prototype
RedHatProductSecurity/jenkins-trestlebot-jobs
Jenkins job examples with trestle-bot
RedHatProductSecurity/LicenseScanner
RedHatProductSecurity/OSCAL
Fork of Open Security Controls Assessment Language (OSCAL)
RedHatProductSecurity/osim-ui-tests
OSIM integration tests
RedHatProductSecurity/rapidast-results-parser
Small Python script used to parse the results provided from Rapidast
RedHatProductSecurity/scancode-toolkit
:mag: Fork of ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!