Alternatives and similar repositories for upload-secure-artifact

Users that are interested in upload-secure-artifact are comparing it to the libraries listed below

• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• tenable / hidden-services-revealer
  ☆39Updated last year
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆32Updated 4 years ago
• offensive-actions / azure-storage-reverse-shell
  This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs
  ☆37Updated last year
• offensive-actions / release-tampering-pocs
  Proof of Concepts for malicious maintainers: How to Tamper with Releases built with GitHub Actions Worfklows, presented at fwd:cloudsec E…
  ☆76Updated last month
• Permiso-io-tools / SkyScalpel
  ☆47Updated last year
• ghostsecurityarchive / waf-btk
  WAF bypass PoC
  ☆49Updated 2 years ago
• hotnops / AWSRoleJuggler
  A toolset to juggle AWS roles for persistent access
  ☆60Updated last year
• DataDog / whoAMI-scanner
  Scan your account for the use of untrusted AMIs
  ☆30Updated 2 months ago
• tstromberg / supplychain-attack-data
  Data about all known supply-chain attacks through history
  ☆60Updated 5 months ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• offensive-actions / terraform-provider-statefile-rce
  This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.
  ☆59Updated 9 months ago
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 8 months ago
• PaloAltoNetworks / github-oidc-utils
  ☆37Updated 6 months ago
• ayushpriya10 / IMDShift
  ☆55Updated 2 years ago
• Aqua-Nautilus / TrailShark
  ☆52Updated last year
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆42Updated 2 years ago
• avishayil / cdk-goat
  Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure
  ☆48Updated last year
• plerionhq / conditional-love
  An AWS metadata enumeration tool by Plerion
  ☆98Updated last year
• Permiso-io-tools / bucket-shield
  ☆14Updated 4 months ago
• talbeerysec / STS-token-decoder
  AWS STS token decoder
  ☆42Updated 7 months ago
• messypoutine / gravy-overflow
  A GitHub Actions Supply Chain CTF / Goat
  ☆26Updated last week
• ReversecLabs / cloud-wiki
  A public cloud security knowledgebase - https://www.secwiki.cloud/
  ☆51Updated 11 months ago
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆50Updated 2 years ago
• hac01 / gcp-iam-brute
  ☆50Updated last year
• lmoratti / risky-records
  Given a list of domains and known IP and buckets that are owned, which might be susceptible to domain hijacking?
  ☆15Updated last year
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year
• ScottNorberg-NCG / CodeSheriff.NET
  ☆18Updated last year
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆136Updated 2 weeks ago