Dependency Scanning

The GitLab Advisory Database, used in GitLab Ultimate Dependency Scanning and Container Scanning.

Contributions welcome!

Search the database at https://advisories.gitlab.com.

Analyzer that scans for application dependencies.

Dependency Scanning Analyzer based on Gemnasium.

Go packages to implement analyzers

Go package for implementing shared vulnerability structs for secure analyzers

Test project with: Language: Go - Package Manager: Go mod

Search for go depedency trees for any direct or indirect import to view all paths that leverage it in your software dependency list/bill of materials. No more searching to find what imported an indirect dependency when that flags with a CVE.