supply-chain-security — independent software & tools

2 independent supply-chain-security listings the big search engines bury.

• trusca

  github · Free · by trustedoss

  Self-hosted, open-source SCA portal — vulnerability (CVE), license compliance, and SBOM management in one UI. Black Duck/Snyk-class capabilities, Apache-2.0.

• gradle-wrapper-validator

  github · Free · by dotanuki-labs

  A validator for gradle/wrapper jar binaries, intended to be used in CI pipelines.