An open API service indexing awesome lists of open source software.

https://github.com/nttcom/threatconnectome

Vulnerability Management with SBOM
https://github.com/nttcom/threatconnectome

sbom vulnerability vulnerability-management

Last synced: about 2 months ago
JSON representation

Vulnerability Management with SBOM

Awesome Lists containing this project

README

          

Vulnerability Management with SBOM

screenshot

## Threatconnectome

[![License: MIT](https://img.shields.io/github/license/nttcom/threatconnectome)](LICENSE)

Threatconnectome supports vulnerability management in industries where products are hard to update, such as automotive, manufacturing and communications infrastructure.

- Alerts and Actions based on SSVC
- PSIRT-friendly UI and Web API
- SPDX 2.3 and CycloneDX 1.6 support

## :eyes: Live demo

:warning: Do not input personal information.

https://demo.threatconnectome.metemcyber.ntt.com/

Please login using the following accounts:

- `user1@demo.test`: `gisoi3qy`
- `user2@demo.test`: `gisoi3qy`

Teams registerd in demo environment as following:
| Product Dev Team | Services |
| --- | --- |
| Metemcyber 開発チーム 東京 | Web Service (Django) |
| Metemcyber Dev Team US | Web Service (Django) |

### Demo Limitation

- Data is reset every 1 hour.
- Do not input personal information in demo environment.
- Only python and alpine vulnerability information are saved in demo environment.
- Because of demo instance, not all actual vulnerability information is registered.

## :rocket: Quick Start

This quick start spins up the full demo stack locally using Docker.

Just clone this project and move to `threatconnectome`.

```bash
git clone https://github.com/nttcom/threatconnectome
cd threatconnectome
```

:partying_face: Try it out!

```bash
# Note: You need docker installed and running to be able to run this script.
./demo_start.sh
```

To stop a running service:

```bash
./demo_stop.sh
```

Need the Firebase Authentication / emulator setup? See [docs/setup_firebase.md](docs/setup_firebase.md). (This is the standard configuration.)

Need an on-premises Supabase stack? See [docs/setup_supabase.md](docs/setup_supabase.md).