Hackers of India

vet: Policy Driven vetting of Open Source Software Components

By Abhisek Datta on 19 Apr 2024 @ Blackhat : Arsenal
💻 Source Code 🔗 Link
#supply-chain-security #open-source-security #dependency-management #sca
Focus Areas: 📦 Software Supply Chain Security , 🔍 Vulnerability Management
This Tool Demo covers following tools where the speaker has contributed or authored
VET

Abstract

vet is a tool for identifying risks in open source software supply chain. It helps engineering and security teams to identify potential issues in their open source dependencies and evaluate them against codified organisational policies.