WhiteSource Bolt
Snyk
SonarQube
Dependabot
Dependency-Check
OWASP Dependency-Check
Vulmon Alerts
WhiteSource
WhiteSource Renovate
Snyk
Dependabot
SonarQube
Quick License Manager
Libraries.io
LicenseSpring
Depfu
Now you can use open source freely, without compromising on security or agility. How? WhiteSource Bolt for GitHub/Azure DevOps is a FREE app/extension, which scans all of your projects and detects vulnerable open source components. Not only that, but it also provides actionable, validated remediation paths to enable quick resolution. We've got you covered with support for over 200 programming languages and continuous tracking of multiple open source vulnerabilities databases including the NVD, security advisories, peer-reviewed vulnerability databases, and open source projects issue trackers.
WhiteSource BoltNo WhiteSource Renovate videos yet. You could help us improve this page by suggesting one.
Snyk - Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.
SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
Dependabot - Automated dependency updates for your Ruby, Python, JavaScript, PHP, .NET, Go, Elixir, Rust, Java and Elm.
Dependency-Check - Dependency-Check is a utility that identifies project dependencies and checks if there are any...
Quick License Manager - Quick License Manager (QLM) is a license protection framework that creates professional and secure license keys to protect software against piracy.
OWASP Dependency-Check - OWASP dependency-check is open-source and can be used to scan Java and .NET applications via the CLI or using plugins.Read articles Continuous Security with OWASP Dependency Check and Integrating OWASP Dependency Check with Jenkins to CI/CD.