Security Tools

Composer Audit PHP Dependencies: Security Scanning for Vulnerabilities

Security Tools
Run composer audit to catch PHP dependency vulnerabilities before production. Ships with Composer 2.4+, works in CI, stops security bugs early.

pip safety check python dependencies: Secure Your Code from Vulnerabilities

Security Tools
Run pip safety check to catch vulnerable Python dependencies before they hit production. Quick commands, real fixes, no late-night fires.

Yarn Audit Command: Security Vulnerability Scanning for Dependencies

Security Tools
Learn how yarn audit finds vulnerabilities in your dependencies, read the report, and fix issues before they hit production.

Retire.js JavaScript Dependency Scanner: Security Tool for Detecting Vulnerable Libraries

Security Tools
Retire.js scans actual JavaScript files for CVEs, not just package.json—catches minified bundles, CDN scripts, and legacy libs npm misses.

Dependency Track Open Source: Software Composition Analysis Platform

Security Tools
Dependency-Track is open source SCA that tracks vulnerabilities in your dependencies without per-seat fees or vendor lock-in.

How to Scan Docker Images for Vulnerabilities with Trivy and Docker Scout

Security Tools
Learn how to scan Docker images for vulnerabilities with Trivy and Docker Scout. Get exact commands, read CVE reports, and fix issues fast.

Trivy Vulnerability Scanner: Setup and Scanning Made Simple

Security Tools
Learn Trivy fast: scan containers, filesystems, and repos in 2 minutes. Export JSON, filter critical CVEs, and integrate into CI pipelines.

GitHub Dependabot Security Updates: Automate Vulnerability Fixes

Security Tools
Dependabot watches for CVEs, opens security PRs in minutes, and auto-patches vulnerabilities. Set up auto-merge safely and avoid common gotchas.

Dependency Scanning in GitLab CI: Setup and Configuration

Security Tools
Set up dependency scanning in GitLab CI to catch CVEs before prod. Quick include, auto-detection, and how to fail on critical findings.

How OWASP Dependency Check Works: Scanning and Matching Vulnerabilities

Security Tools
Learn how OWASP Dependency-Check scans manifests, builds CPEs, matches NVD data, and surfaces hidden risks your tests miss—all without running code.

Software Composition Analysis: Secure Your Open-Source Dependencies

Security Tools
Learn what software composition analysis (SCA) is and how it protects your app by tracking every dependency, CVE, and license before they cause trouble.

Snyk vs Dependabot Comparison: Features, Pricing, and Performance

Security Tools
Snyk vs Dependabot: compare a deep security platform with GitHub's free PR bot. Which fits your workflow for dependency updates and vulnerability scans?

npm audit vs npm outdated: Key Differences for Developers

Security Tools
npm audit finds security holes; npm outdated shows newer versions. Run both to catch CVEs and plan upgrades without surprises.

Dependency Vulnerability Scanner Tools That Protect Your Code

Security Tools
Dependency vulnerability scanners check your code for unsafe libraries, catch hidden CVEs, and stop risky builds before they hit production.
123Page 1 of 3

Recent articles