Vulnlog

@vulnlog.bsky.social

5 Followers 6 Following

Supply chain security, as code. Open-source CLI for tracking SCA vulnerability findings in your repository. 🔗 vulnlog.dev 🔗 vulnlog.dev/docs/ 🐙 github.com/vulnlog/vulnlog

The terminal shows the execution of Vulnlog's CLI version output, which states that Vulnlog is version 0.15.0.
A Vulnlog vulnerability entry for Rust demonstrating the Cargo Audit suppression functionality in Vulnlog.
A cargo audit suppression file in TOML format is generated by Vulnlog.
Infographic explaining the Vulnlog workflow in three steps: (1) An SCA scanner reports a finding, (2) An engineer analyses the impact, (3) Vulnlog generates a report and ignore files. Tagline: Supply chain security, as code. Streamline your vulnerability tracking; from developers, for developers.
This is an excerpt from the Vulnlog project's own Vulnlog YAML file, which describes one of the reported vulnerabilities.