This IT project is part of our digitalization and optimization of our customers’ IT landscape. Through targeted measures, we promote technological progress, optimize cross-system processes and create a sustainable basis for future developments. Our IT reference projects serve as a basis for orientation. They support the reusability of tried and tested concepts as part of project implementation.
This is one of 4902 IT projects that we have successfully completed with our customers.How can we support you?
CVE scanner
Brief description
To support compliance and security assessments of software development projects, a tool is being developed that checks source code for security vulnerabilities in the components used. Known CVEs are identified, and potential licensing issues are uncovered.
Supplement
Using Kotlin, a standalone tool is being built to analyze source code repositories. This involves automatically detecting the technology stack of the application under review. Initially, the tool analyzes JavaScript/TypeScript projects as well as Java, Kotlin, and .NET code. For each project analyzed, the Software Bill of Materials (SBOM) is determined with an export in SPDX and CycloneDX formats. Each entry in the SBOM is checked for its license and any included CVEs. The results can be evaluated and further processed via HTML reports and JSON exports. The implementation is carried out using specifications that are interpreted by Claude Code and converted into code.
Subject description
When developing and operating software, certain regulations must be followed. These may be internal policies or requirements defined by regulatory bodies. Such regulations can, for example, demand proof that the application is free of security incidents of certain severity levels (e.g. low, medium, high). In addition, documentation is often required for all licenses applicable to the open-source components used. By combining these security and license checks with the reproducible and regularly repeatable generation of up-to-date reports, compliance and security requirements can be met.
IT project data
- Industries Consulting
- Specialist tasks Code Review, Continuous Integration, Defect Management, IT security, library administration, Operating, software development
- DP tasks customised software new development
- System environments Client/Server, component technology, Internet/Intranet
- Procedure model agile software development
- Programming languages Kotlin
- Development and test tool JetBrains IntelliJ IDEA
Project start25.03.2026
Customers who trust us
