CATEGORY 22 / 59

Dépendances et supply chain

21 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.

C22-T001
source 9

SCA

Authorisation: internal_access

View tutorial →

Paid

demo · preproduction · production

Automatic SCA

Engine, evidence or review depending on scope

C22-T002
source 9

CVE PHP Composer

Authorisation: internal_access

View tutorial →

Paid

demo · preproduction · production

Automatic SCA

Engine, evidence or review depending on scope

C22-T003
source 9

CVE npm

Authorisation: internal_access

View tutorial →

Paid

demo · preproduction · production

Automatic SCA

Engine, evidence or review depending on scope

C22-T004
source 9

CVE Python

Authorisation: internal_access

View tutorial →

Paid

demo · preproduction · production

Agent / internal access

Engine, evidence or review depending on scope

C22-T005
source 9

CVE Java

Authorisation: internal_access

View tutorial →

Paid

demo · preproduction · production

Agent / internal access

Engine, evidence or review depending on scope

C22-T006
source 9

Dépendances obsolètes

Authorisation: internal_access

View tutorial →

Paid

demo · preproduction · production

Automatic SCA

Engine, evidence or review depending on scope

C22-T007
source 9

Dépendances abandonnées

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T008
source 9

Packages typosquatting

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T009
source 9

Packages compromis

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T010
source 9

SBOM

Authorisation: internal_access

View tutorial →

Paid

demo · preproduction · production

Automatic SCA

Engine, evidence or review depending on scope

C22-T011
source 9

Licences

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T012
source 9

Intégrité lock files

Authorisation: internal_access

View tutorial →

Paid

demo · preproduction · production

Automatic SCA

Engine, evidence or review depending on scope

C22-T013
source 9

Subresource Integrity

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T014
source 9

Scripts tiers

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T015
source 9

CDN tiers

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T016
source 9

Widgets tiers

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T017
source 9

Tag managers

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T018
source 9

Chaîne CI/CD

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T019
source 9

Signature des artefacts

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T020
source 9

Protection branches

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope

C22-T021
source 9

Dépendances de build

Authorisation: contractual

View tutorial →

Paid

demo · preproduction · production

Documentary review

Engine, evidence or review depending on scope