SecureStackCo / actions-sbom
A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements, and has the SBOM to show it!
☆25Updated last year
Related projects ⓘ
Alternatives and complementary repositories for actions-sbom
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆57Updated last year
- 🖇️ STRIDE vs. ASVS equivalence table☆75Updated 2 months ago
- The security workflow engine!☆73Updated this week
- ☆110Updated last year
- Clean accounts over permissions in GCP infra at scale☆71Updated last year
- boostsecurityio/lotp☆100Updated 7 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆37Updated last year
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆61Updated this week
- WAF bypass PoC☆43Updated last year
- ☆51Updated 8 months ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆39Updated 11 months ago
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆129Updated last year
- A tool to check the security settings of Github Organizations.☆69Updated last year
- Protect against subdomain takeover☆92Updated 5 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆97Updated 9 months ago
- Script to audit GitHub Action Workflow files for potential vulnerabilities.☆150Updated 2 months ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆84Updated last month
- A public cloud security knowledgebase - https://www.secwiki.cloud/☆49Updated 8 months ago
- This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…☆39Updated 2 months ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆55Updated 4 months ago
- SecureStack Application Bill of Materials (ABOM/SBOM)☆13Updated 2 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- Independently deploy customized honeyservices in AWS to trigger alerts on unauthorized access. It utilizes a dedicated CloudTrail for pre…☆43Updated 6 months ago
- Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix☆57Updated last year
- ☆151Updated 2 months ago
- ☆80Updated this week
- ☆36Updated 6 months ago
- ☆40Updated 5 months ago
- ☆93Updated this week