Alternatives and similar repositories for www-project-wrongsecrets:

Users that are interested in www-project-wrongsecrets are comparing it to the libraries listed below

• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆75Updated 5 months ago
• OWASP / OpenCRE
  ☆91Updated 2 months ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆93Updated 11 months ago
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆68Updated last month
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆70Updated last year
• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆130Updated last year
• devops-kung-fu / trustier
  Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev
  ☆11Updated 3 months ago
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆106Updated last year
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆61Updated 7 months ago
• CERTCC / SSVC
  Stakeholder-Specific Vulnerability Categorization
  ☆136Updated this week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆170Updated 2 months ago
• iriusrisk / startleft
  StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…
  ☆49Updated 2 weeks ago
• Checkmarx / dustilock
  DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.
  ☆35Updated 3 years ago
• OWASP / www-project-integration-standards
  OWASP Foundation Web Respository
  ☆27Updated 5 months ago
• anchore / nvd-data-overrides
  ☆47Updated this week
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 8 months ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆97Updated last year
• P3tra-WP / Jupyter-Threat
  ☆14Updated 2 years ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆82Updated this week
• dependency-check / Dependency-Check_Action
  Github action to run dependency check
  ☆72Updated 5 months ago
• Whitespots-OU / security-requirements-generator
  A small tool to help developers understand a huge set of security requirements from appsec teams
  ☆45Updated 2 years ago
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated last year
• OWASP / threat-modeling-playbook
  ☆32Updated 2 years ago
• OWASP / www-project-vulnerability-management-guide
  OWASP Foundation Web Respository
  ☆28Updated 2 years ago
• jeremylong / malicious-dependencies
  Demonstrates how a malicious dependency could negatively impact the build output.
  ☆24Updated last year
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆138Updated 9 months ago
• checkmarx-ts / CxAnalytix
  Exports vulnerability scan data from the Checkmarx SAST platform for use in analytical tools.
  ☆19Updated 2 months ago
• segmentio / threat-modeling-training
  Segment's Threat Modeling training for our engineers
  ☆240Updated 3 years ago
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆244Updated 3 weeks ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆152Updated this week