Skip to content
Back to the index

supplyguard

PyPIInfrastructure

PulseGate's liveness check found it on 3 Oct 2026; it is registered on GitHub and PyPI and has been in the index since 22 Aug 2026. How this is checked

SupplyGuard is an open-source command-line scanner for software supply-chain security. It supports vulnerability scanning, SBOM analysis, SAST, secrets detection, SARIF output, and self-healing remediation workflows for development and security teams.

Inferred · not functionally tested

Open SourceMITCLISelf-hosted
Visit PyPI

Overview

6 features

Purpose: Detecting and remediating software supply-chain vulnerabilities, secrets, and code-quality risks.

Inferred · not functionally tested

Audience: software developers and security teams

Inferred · not functionally tested

Functions: data_extraction, workflow_automation

Inferred · not functionally tested

Interfaces: API: unknown · MCP: unknown · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)

Recorded constraints: pricing: open_source · license: MIT · platforms: CLI · deployment: cli, self_hosted

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: pypi.org · github.com. These links do not verify the individual claims.

supplyguard sits in PulseGate's Application security & vulnerability scanning category. Inferred · not functionally tested: It focuses on detecting and remediating software supply-chain vulnerabilities, secrets, and code-quality risks. Inferred · not functionally tested: It is built as an open-source project for software developers and security teams. Basis unknown · not verified: supplyguard is open source under the MIT license. Basis unknown · not verified: It ships for the command line, and it can be self-hosted.

Taheraam builds and maintains supplyguard, and it first shipped in 2026. Development happens publicly on GitHub with 5 commits in the last 90 days. Inferred · not functionally tested: Among its 6 catalogued features are Vulnerability Scanning, SBOM Analysis, and SAST Scanning.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • Vulnerability Scanning
  • SBOM Analysis
  • SAST Scanning
  • Secrets Detection
  • SARIF Output
  • Automated Remediation

Topics: Inferred · not functionally tested

Tags
software-supply-chainsbom-scanningvulnerability-detectionsecrets-detectionsarif-reporting
AI capabilities
TextStructured
Inference: Local

JSON profile · Text profile · Access guide

Built with & integrations

Framework
flask
AI providers
anthropic
Runs on
CLISelf-hosted

Trust & compliance

License
MIT
Public signals
HTTPSOpen SourceFree tierGitHubActive maintenance

Indexing history

1

What PulseGate has recorded for this listing

  1. Indexed22 Aug · 11:11 UTC
    supplyguard seen via PyPI Bulk Enumerator
    Source: PyPI Bulk Enumerator · Open

Frequently asked questions about supplyguard

What does supplyguard do?
Inferred · not functionally tested: Supplyguard focuses on detecting and remediating software supply-chain vulnerabilities, secrets, and code-quality risks. It is catalogued under Application security & vulnerability scanning on PulseGate.
Who is supplyguard for?
Inferred · not functionally tested: supplyguard is an open-source project built for software developers and security teams.
Is supplyguard free?
Basis unknown · not verified: Yes — supplyguard is open source under the MIT license and free to use.
What platforms does supplyguard run on?
Basis unknown · not verified: supplyguard runs on the command line. It can also be self-hosted.
Is supplyguard still active?
PulseGate's liveness check found it on 3 Oct 2026. Its GitHub repository shows 5 commits in the last 90 days.
What are alternatives to supplyguard?
Similar projects tracked by PulseGate include pipguard, shipguard, and Patchguard.pipguardshipguardPatchguard
Who makes supplyguard?
supplyguard is developed by Taheraam.
How long has supplyguard been around?
supplyguard first shipped in 2026.

Similar projects

Closest matches by what these projects do

Submit to the index
Apps, agents and models — free, no signup.