Skip to content

Supply Chain Security

SBOM generation, software signing, policy-as-code, and dependency vulnerability scanning.

Subscribe
← Releases
Upgrade now
goklab/guardvibe v3.31.0 Security relevant
Auth RCE / SSRF Dependencies

Auth.js + Next.js fixes

Review required
msaad00/agent-bom v0.95.0 Breaking risk
Auth RBAC Dependencies

UI, CLI, Deploy, Compliance, API

v0.96.3 (11d) IA hub consolidation, scalable graph, repo README
Review required
isitsecure v0.1.1 Security relevant
Dependencies

CodeQL fix + Slack YAML repair

No immediate action
isitsecure v0.5.0 New feature

MCP scan server + CI fixes

Review required
msaad00/agent-bom v0.97.5 Mixed
Dependencies

Deploy updates + UI graph enhancements + dep bumps

No immediate action
isitsecure v0.3.0 New feature

Plain‑English framing

v0.2.1 (14d) Auth‑bypass SQLi detection
v0.1.0 (16d) Scanning + blind injection
v0.97.2 (5d) Audits update + Demo hardening + Deps bump
v0.97.1 (6d) Store‑backed producer, API key binding, parity preservation
v0.97.0 (6d) API auth refactor + Graph read/export
v0.96.4 (6d) Graph, CI, Auth, Compliance, CIEM
Review required
cerbos v0.54.0 Mixed
Auth RBAC Crypto / TLS

GOMEMLIMIT + npm lock + tutorial fix

No immediate action
isitsecure v0.4.1 Maintenance

Routine maintenance and dependency updates.

v0.4.0 (12d) Remediation + git‑free fix + safety‑net capture
v0.2.0 (14d) Revert + XSS fixes + feature
v0.1.2 (15d) Routine maintenance and dependency updates.
No immediate action
miracodeai/mira v0.5.1 Maintenance

Routine maintenance and dependency updates.

Beta — feedback welcome: [email protected]