About ts-sast¶
ts-sast exists because of a gap: companies still run business-critical Visual Basic 6 applications, and the only static analysis tools that understand VB6 are large commercial platforms. The rule pack was first drafted next to the VB6 project scanner in ts-scan, and moved into its own tool for the same reason ts-obom did: static analysis is a different job than building a bill of materials, and a pipeline that only wants an SBOM should not have to carry a .NET analyser. Here it is: ts-sast.
About TrustSource¶
TrustSource is a brand representing a SaaS-solution that supports companies to cope with all sort of regulations to comply with when developing and distributing software, such as ISO/IEC 5230 (OpenChain on Oopen source compliance), ISO/IEC 18974 (Open Source Security Assurance) or the Cyber Resilience Act (CRA) introduced by the European Union in October 2024.
While the platform is provided as a managed service, the scanners as well as the core itself are available as open source solutions. You may use it to self host the
About EACG¶
EACG is the company behind TrustSource. EACG is an enterprise architecture consulting company, that has started the endavour in 2014. EACG supports its clients with design and delivery of digital business models. Explorationa and relisation of the prototypes and development of the first business units are part of their eingagement. This very early lead to the question of licenses and ownership.
Based on the experiences how fast a wrong license may enter the repository automated SBOM creation has been invented before even the SBOM became a dominating slogan. Vulnerbaility management has been added 2018 as a logical consequence, the service started to become interesting to others...
About EACG Operations Services¶
EACG decided to hand the operations of the platform to its AWS operations subsidiary. Thus EACG OS is taking care to run and manage the platform as well as the provisioning of support services while EACG is taking care for the individual consulting services. You may find further information on the EACG website. Find here links to further information: