Contrast-Security-OSS / contrastscan-action
Contrast Scan GitHub action
☆19Updated 5 months ago
Alternatives and similar repositories for contrastscan-action:
Users that are interested in contrastscan-action are comparing it to the libraries listed below
- ThreatModel for Azure Storage - Library of all the attack scenarios on Azure Storage, and how to mitigate them following a risk-based app…☆57Updated last year
- Manage a uniform team of security managers for every organization in your enterprise☆17Updated 5 months ago
- Threat Modeling Manifesto☆27Updated 6 months ago
- ☆38Updated 9 months ago
- OWASP Foundation Web Respository☆28Updated 2 years ago
- OWASP Foundation Web Respository☆10Updated last year
- Collection of scripts to extract Azure resource information to support security compliance audit.☆23Updated 3 years ago
- Public repository to provide guidance and examples for people to start learning IaC. This repository also contains some open-hack style l…☆22Updated last year
- This GitHub repository contains lessons for developing Microsoft Security CoPilot plugins☆18Updated 8 months ago
- ☆17Updated 3 years ago
- DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications☆35Updated 2 years ago
- Cloud threat detection visualization from excalidraw☆12Updated 2 years ago
- Security Scanner based on CIS benchmark 1.1 inspired by Scout2☆53Updated last year
- GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file☆13Updated 8 months ago
- ☆10Updated last year
- (WIP) CIS Microsoft Azure Foundations Benchmark☆15Updated 2 years ago
- Extensible Azure Security Tool - Documentation☆81Updated last year
- ☆18Updated 3 years ago
- The source files and tools needed to build the OWASP Cornucopia decks in various languages☆47Updated this week
- Azure Security Lab Workshop☆40Updated 6 years ago
- OWASP Foundation Web Respository☆54Updated last year
- ☆73Updated 7 months ago
- Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning …☆41Updated 7 months ago
- Colection of different JUMPSEC advisories, guidance, and scripts for all of the latest vulnerabilities and adversaries☆13Updated 3 years ago
- A fun POC that is built to understand AI security agents.☆21Updated last month
- This repository will teach you have to do my talk "Pushing Left, Like a Boss".☆70Updated 3 years ago
- OWASP Foundation Web Respository☆27Updated 5 months ago
- Scripts to define your azure security governance as code and avoid manual settings of permissions and avoiding configuration drift☆21Updated 3 years ago
- Rapidly apply hundreds of security controls in Azure☆184Updated last year
- OWASP Foundation Threat Dragon Project Web Repository☆74Updated last week