← All tools

macaron

https://oracle.github.io/macaron/

Free

Categories

Forensics

Description

Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:

Keywords

build-system cicd docker gradle integrity-protection malware-analysis malware-detection maven npm python sbom slsa supply-chain-security

Screenshots

Example Usage

- uses: oracle/macaron@b31acfe389133a5587d9639063ec70cb84e7bc47 # v0.23.0
  with:
    repo_path: 'https://github.com/example/project'
    policy_file: check-github-actions
    policy_purl: 'pkg:github.com/example/project@.*'
    output_dir: 'macaron-output'
    upload_attestation: true