The safeguards map / 1.1 Code and dependencies
GUAC
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
Aggregates software security metadata, including SBOMs and vulnerability data, into a graph database that can be queried to inform policy and risk decisions.
Where it sits
1.1 Code and dependencies (primary): Ingests SBOMs and vulnerability data about software artifacts into one graph database, so a team can query which dependencies and vulnerabilities affect what it ships.
aggregates software security metadata into a high fidelity graph database
captured
Querying this graph can drive higher-level organizational outcomes such as audit, policy, risk management
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- by hand
Handoffs
consumes Software and AI inventory: SPDX, CycloneDX
consumes Vulnerability status: OSV
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.