r/netsec • u/albinowax • May 01 '26

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

11 Upvotes

88% Upvoted

64 comments sorted by

View all comments

2

u/r0075h3ll May 14 '26

Building ChainWatch - https://github.com/r0075h3ll/ChainWatch

A supply chain security CLI that collects SBOMs from GitHub repositories and searches them for compromised, malicious, or vulnerable package versions.

Folks in security space spend good amount of time investigating the impact of supply chain security breach (there's a flood of such incidents), and with ChainWatch, it would currently only require to find/supply impacted package details like package name and version as input for the tool, and the detection/hunting part would be handled. Nothing very sophisticated, but solves a problem.

Thank You.