diff --git a/README.md b/README.md
index 071e3a9..94d8403 100644
--- a/README.md
+++ b/README.md
@@ -162,6 +162,7 @@ Supply chain is often the target of attacks. Which libraries you use can have a
 | **kritis** | [https://github.com/grafeas/kritis](https://github.com/grafeas/kritis) | Solution for securing your software supply chain for Kubernetes apps |![Kritis](https://img.shields.io/github/stars/grafeas/kritis?style=for-the-badge)|
 | **ratify** | [https://github.com/deislabs/ratify](https://github.com/deislabs/ratify) | Artifact Ratification Framework |![ratify](https://img.shields.io/github/stars/deislabs/ratify?style=for-the-badge)|
 | **chain-bench** | [https://github.com/aquasecurity/chain-bench](https://github.com/aquasecurity/chain-bench) | Supply Chain Audit Tool |![chain-bench](https://img.shields.io/github/stars/aquasecurity/chain-bench?style=for-the-badge)| 
+| **lockvet** | [https://github.com/matteo-sung/lockvet](https://github.com/matteo-sung/lockvet) | Vets lockfile/dependency changes in PRs and CI: typosquats, versions pulled from registries, new install scripts, dropped provenance, integrity/resolution tampering; 31 lockfile formats |![lockvet](https://img.shields.io/github/stars/matteo-sung/lockvet?style=for-the-badge)| 
 
 
 ## SAST