Alternatives and similar repositories for www-project-appsec-pipeline

Users that are interested in www-project-appsec-pipeline are comparing it to the libraries listed below

• Risk-Assessment-Framework / RiskAssessmentFramework
  The Secure Coding Framework
  ☆22Updated 5 years ago
• Threagile / run-threagile-action
  GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file
  ☆13Updated last year
• swagitda / security-decision-trees-graphviz
  Decision trees generated via Graphviz to inform pragmatic threat modelling.
  ☆11Updated 4 years ago
• GoogleCloudPlatform / assured-workloads-terraform
  ☆16Updated 10 months ago
• ComplianceAsCode / oscal
  OSCAL SSP content for technologies shipped by Red Hat
  ☆15Updated 2 years ago
• zapbot / zap-mgmt-scripts
  ZAP Management Scripts
  ☆23Updated 2 weeks ago
• OWASP-Foundation / Project-Handbook
  This is a working copy of the OWASP Project Handbook and is the draft where changes are made before publishing a final version on the OWA…
  ☆17Updated 8 years ago
• OWASP / www-project-integration-standards
  OWASP Foundation Web Respository
  ☆28Updated 10 months ago
• iriusrisk / startleft
  StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…
  ☆50Updated this week
• Threat-Modeling-Manifesto / threat-modeling-manifesto
  Threat Modeling Manifesto
  ☆28Updated 11 months ago
• OWASP / threat-modeling-playbook
  ☆34Updated 3 years ago
• OSSIndex / vulns
  Report missing advisories and corrections on OSS Index
  ☆17Updated 2 years ago
• lightspin-tech / red-bucket-gcp
  ☆10Updated 3 years ago
• cisagov / pe-reports
  Automated process to build and distribute Posture & Exposure Reports' bi-weekly to customers.
  ☆17Updated last year
• anunay-bhatt / secure-serverless-reference-architecture
  A walkthrough of security controls for a serverless architecture via a demo application
  ☆11Updated 3 years ago
• P3tra-WP / Jupyter-Threat
  ☆14Updated 2 years ago
• tenable / cloud-security-actions
  ☆12Updated 2 months ago
• mal-lang / exampleLang
  A MAL language that demonstrates the Maven project structure
  ☆23Updated 3 years ago
• center-for-threat-informed-defense / defending-iaas-with-attack
  Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a me…
  ☆14Updated 3 weeks ago
• oasis-open / csaf-parser
  OASIS TC Open Repository: CSAF Parser tool for parsing and checking the syntax of the Common Vulnerability Reporting Framework (CVRF) con…
  ☆23Updated 2 years ago
• FIRSTdotorg / epss
  Exploit Prediction Scoring System (EPSS)
  ☆27Updated 3 years ago
• awsdocs / aws-security-hub-user-guide
  The open source version of the AWS Security Hub documentation. To provide feedback or request changes, you can submit a pull request that…
  ☆35Updated 2 years ago
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated 2 years ago
• mitre / heimdall_tools
  DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications
  ☆35Updated 3 years ago
• DefectDojo / Community-Contribs
  DefectDojo Community Content
  ☆18Updated 2 weeks ago
• CVEProject / cve-documents
  Source for official CVE Program policy documents.
  ☆16Updated last month
• ramimac / breach-list-database
  A meta-database collecting resources that compile lists of breaches
  ☆20Updated 7 months ago
• aquasecurity / saas-api-samples
  Sample code snippets for consuming the CloudSploit API
  ☆13Updated last year
• Mixeway / MixewayBackend
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayBackend pro…
  ☆16Updated 9 months ago
• DevSlop / pixi-crs
  CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.
  ☆15Updated 4 years ago