An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.
715
stars
62
forks
source link
fix(4.2.5): filter out anonymous packages from different repositories #27
Closed
morwn closed 2 years ago
Description
In case of packages that are not bound to the audited repository, we filter them out
Checklist