On this page, you will find tutorials to get you started with Macaron. The tutorials show Macaron in action, analyzing a software component and its dependencies that are built using GitHub Actions or GitLab. Macaron supports artifacts published on GitHub release, Maven Central, or privately hosted registries, such as JFrog. For the full list of supported technologies, such as CI services, registries, and provenance types see :ref:`this page <supported_technologies>`.
.. toctree:: :maxdepth: 1 commit_finder detect_malicious_package detect_vulnerable_github_actions npm_provenance detect_malicious_java_dep generate_verification_summary_attestation use_verification_summary_attestation exclude_include_checks source_finder