OWASP / Software-Component-Verification-Standard

Related projects ⓘ

Alternatives and complementary repositories for Software-Component-Verification-Standard

• OWASP / Container-Security-Verification-Standard
  Container Security Verification Standard
  ☆57Updated 5 years ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆169Updated 9 months ago
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆332Updated 3 years ago
• OWASP / www-project-integration-standards
  OWASP Foundation Web Respository
  ☆27Updated 2 months ago
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆104Updated 10 months ago
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆274Updated this week
• OWASP / OpenCRE
  ☆80Updated this week
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆188Updated 6 years ago
• CycloneDX / bom-examples
  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
  ☆179Updated last week
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆92Updated 8 months ago
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆180Updated last week
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆299Updated 6 months ago
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆59Updated this week
• owaspsamm / core
  Core model including reused documentation
  ☆89Updated 2 months ago
• CycloneDX / sbom-utility
  Utility that provides an API platform for validating, querying and managing BOM data
  ☆95Updated this week
• iriusrisk / startleft
  StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…
  ☆48Updated this week
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆54Updated last year
• OWASP / user-security-stories
  Repo to hold mapping of user-security-stories
  ☆114Updated 5 years ago
• Toreon / threat-model-playbook
  ☆80Updated 3 years ago
• wurstbrot / security-pins
  Pin designs for security related items
  ☆37Updated 6 months ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆75Updated 2 months ago
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆313Updated 2 years ago
• ossf / s2c2f
  The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…
  ☆189Updated 2 months ago
• OWASP / www-project-samm
  OWASP Foundation Web Respository
  ☆40Updated last year
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆177Updated 5 years ago
• OWASP / www-project-proactive-controls
  OWASP Foundation Web Respository
  ☆128Updated last week
• OWASP / www-project-threat-dragon
  OWASP Foundation Threat Dragon Project Web Repository
  ☆73Updated this week
• OWASP / samm
  SAMM stands for Software Assurance Maturity Model.
  ☆397Updated 2 years ago
• OWASP / www-project-security-knowledge-framework
  OWASP Foundation Web Respository
  ☆64Updated last year
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆221Updated 3 months ago