guacsec

scale and perf tests for trustify

GUAC aggregates software security metadata into a high fidelity graph database.

Vulnerability correlation engine that works at scale turning your data(SBOMs, CVE, advisories) into evidence from which to assert vulnerability correlations. Links vulnerability ↔ component ↔ product ↔ VEX across CSAF/VEX, OSV and CVE, and answers affectedness questions via REST API.

Trustify UI component.

Red-Hat Dependency Analytics Exhort JavaScript API

Red Hat Dependency Analytics Exhort Java API

Model Context Protocol (MCP) server for Trustify

Helm charts for Trustify

Visualizer for GUAC