GitHub - eclipse/steady: Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/
Eclipse Steady (Incubator Project)
Discover, assess and mitigate known vulnerabilities in your Java projects
Eclipse Steady supports software development organizations in regards to the secure use of open-source components during application development. The tool analyzes Java applications in order to:
detect whether they depend on open-source components with known vulnerabilities,
collect evidence regarding the execution of vulnerable code in a given application context (through the combination...
Read more at github.com