Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:
python docker npm gradle maven build-system malware-analysis cicd integrity-protection malware-detection sbom slsa supply-chain-security
-
Updated
Aug 1, 2026 - Python