PwnGuard

Dependency security for GitHub

Know what your
code depends on.

Connect your repositories. See the packages they use, the advisories that match, and the evidence behind each finding.

Checking whether you’re already signed in.

Explore the workflow
Dependency traceIllustrative example
Select a node to explore

The version, with its source

See the recorded package version and the manifest or lockfile it came from.

From repository to review.

  1. 01

    Start with your repositories

    Choose what PwnGuard can read. Group related repositories into projects to review them together.

  2. 02

    See the dependency chain

    Inspect the packages and versions in your repositories, with the source files they came from.

  3. 03

    Follow a finding to its source

    Review matching advisories and the evidence behind each finding. Decide what needs attention.