Vulnerability Scanning OSS tools — 5 tracked with release & CVE alerts

msaad00/agent-bom Healthy open source

AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

Checkov Healthy open source

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Trivy At Risk open source

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Deepfence ThreatMapper At Risk open source

Open Source Cloud Native Application Protection Platform (CNAPP)

Deepfence SecretScanner At Risk open source

unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock

Tools