Alternatives and similar repositories for dustilock

Users that are interested in dustilock are comparing it to the libraries listed below

• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated last year
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆176Updated 3 weeks ago
• snyk-labs / github-actions-scanner
  Scans your Github Actions for security issues
  ☆86Updated this week
• AdnaneKhan / ActionsTOCTOU
  Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
  ☆33Updated 6 months ago
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆106Updated 9 months ago
• nikitastupin / pwnhub
  How GitHub Actions workflows can be hacked
  ☆171Updated last year
• amalmurali47 / onaws
  Fetch the details of assets hosted on AWS.
  ☆89Updated last year
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆90Updated last year
• nccgroup / ccs
  ☆114Updated 2 years ago
• SecureStackCo / visualizing-software-supply-chain
  A project to visualize the software supply chain
  ☆54Updated 2 years ago
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆140Updated 2 weeks ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆137Updated 3 weeks ago
• nullenc0de / ChromeAudit
  Nuclei plugins to audit Chrome extensions
  ☆65Updated last year
• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆138Updated last year
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆279Updated last year
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 8 months ago
• OpenSecuritySummit / oss-website
  The Open Security Summit is focused on the collaboration between, Developers and Application Security
  ☆45Updated 4 months ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆74Updated 2 months ago
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆96Updated 9 months ago
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆227Updated 5 months ago
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆153Updated last year
• elttam / semgrep-rules
  ☆204Updated last year
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆94Updated 3 months ago
• SecureStackCo / actions-sbom
  A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, sta…
  ☆25Updated 2 years ago
• Escape-Technologies / goctopus
  Blazing fast GraphQL discovery & fingerprinting toolbox.
  ☆122Updated last year
• dsecuredcom / yataf
  yataf extracts secrets and paths from files or urls - its best used against javascript files
  ☆53Updated last year
• OWASP / OpenCRE
  ☆127Updated 2 weeks ago
• opengrep / opengrep-rules
  ☆100Updated 9 months ago