devguard-web - DevGuard Web Frontend  - Secure your Software Supp

项目说明

<!--
Copyright (C) 2023 Sebastian Kawelke, l3montree UG (haftungsbeschraenkt)

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as
published by the Free Software Foundation, either 3 of the
License, or (at your option) any later .

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU Affero General Public License for more details.

You should ha a copy of the GNU Affero General Public License
along with this program. If not, see <
-->

<!-- Impro of back to top link: See: -->

<a name="readme-top"></a>

<!--
*** Thanks for checking out the Best-README-Template. If you have a suggestion
*** that would make this better, please fork the repo and create a pull request
*** or simply open an issue with the tag "enhancement".
*** Don't forget to give the project a star!
*** Thanks again! Now go create something AMAZING! :D
-->

<!-- PROJECT LOGO -->
<br />
<di="center">

<picture>
<source srcset="public/logo_in.svg" media="(prefers-color-scheme: dark)">
<img src="public/logo_horizontal.svg" alt="De by L3montree Logo" width="240" height="80">
</picture>

<h3 align="center">De - Develop Secure Software - Frontend</h3>

<p align="center">
Manage your C, Integrate your Scanners, Documentation made easy, Compliance to security Frameworks
<br />
<br />
<a href=" Bug</a>
·
<a href=" Feature</a>
</p>
</div>

<p align="center">
<a href=" src=" alt="OpenSSF Badge"></a>
<a href=" src=" alt="License"></a>
<a href=" src="
<a href=" src=" alt="CVSS"></a>
</p>

<!-- TABLE OF CONTENTS -->
<details>
<summary>Table of Contents</summary>
<ol>
<li>
<a href="#about-the-project">About The Project</a>
<ul>
<li><a href="#built-with">Built With</a></li>
</ul>
</li>
<li><a href="#getting-started">Getting Started</a></li>
<li><a href="#usage">Usage</a></li>
<li><a href="#roadmap">Roadmap</a></li>
<li><a href="#contributing">Contributing</a></li>
<li><a href="##code-of-conduct">Code of Conduct</a></li>
<li><a href="#license">License</a></li>
</ol>
</details>

<!-- ABOUT THE PROJECT -->

About The Project

De is a management that fits perfectly into any IT en and ensures mitigation of and complete documentation of the handling processes. It aims to be compliant to security frameworks, like ISO 27001 or German BSI Grundschutz.
With De you can easily go through the management process:

1. Consolidation of
2. Enhancing the data
3. Risk Assessment
4. Selection of the mitigation type
5. Sharing of the information to responsible parties
6. Reporting

<p align="right">(<a href="#readme-top">back to top</a>)</p>

Demo

We are using De to scan and manage the risks of De itself—essentially eating our own dogfood. The project can be found here:

DEMO

We believe should be shared via a link due to its dynamic nature, as what is risk-free today may be affected by a C. We' the De risk scoring into the metrics, with detailed documentation on its calculation to follow soon. SBOM and VEX data are always up to date at these links:

| Project | SBOM | VeX |
| ---------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------- |
| De Golang API | SBOM | VeX |
| De Web-Frontend | SBOM | VeX |

Built With

De is divided into two projects: A frontend (De Web) and a backend (De Backend).

Frontend (this project):

Backend:

<p align="right">(<a href="#readme-top">back to top</a>)</p>

<!-- GETTING STARTED -->

Getting Started

To get a local copy up and running follow these simple example steps.

1. Clone the repo

2. Copy .en to .env

3. Install NPM packages

4. Start the de server

<p align="right">(<a href="#readme-top">back to top</a>)</p>

<!-- ROADMAP -->

Roadmap MVP

See the open issues for a full list of proposed features (and known issues).

<p align="right">(<a href="#readme-top">back to top</a>)</p>

<!-- CONTRIBUTING -->

Contributing

Please read our contribution guide if you would like to report a bug, ask a question, or help us with coding.

<p align="right">(<a href="#readme-top">back to top</a>)</p>

<!-- Code of Conduct -->

Code of Conduct

Help us keep De open and inclusi read and follow our Code of Conduct.

<p align="right">(<a href="#readme-top">back to top</a>)</p>

<!-- LICENSE -->

License

Distributed under the AGPL-3.0-or-later License. See LICENSE.txt for more information.

<p align="right">(<a href="#readme-top">back to top</a>)</p>

<!-- MARKDOWN LINKS & IMAGES -->
<!-- -->

[Next.js]:
[Next-url]:
[React.js]:
[React-url]:
[go.de://img.shields.io/badge/Go-00ADD8?style=for-the-badge&logo=go&logoColor=white
[go-url]:

Build using kaniko

项目信息

开发语言：TypeScript

Star 数：24

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕DevGuard Web Frontend  - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。