SecureStackCo / actions-sbomLinks
A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements, and has the SBOM to show it!
☆25Updated 2 years ago
Alternatives and similar repositories for actions-sbom
Users that are interested in actions-sbom are comparing it to the libraries listed below
Sorting:
- A tool to check the security settings of Github Organizations.☆72Updated 2 years ago
- 🖇️ STRIDE vs. ASVS equivalence table☆77Updated last year
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated 2 years ago
- A security tool designed to help review merged code changes to open source maintained repositories via LLM assisted review to safeguard a…☆31Updated last year
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Updated 2 years ago
- Scans every git push to your Github organisations to find unwanted secrets.☆87Updated 6 months ago
- Compares and analyzes GCP IAM roles.☆77Updated 8 months ago
- ☆114Updated 3 months ago
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- ☆127Updated 2 weeks ago
- The security workflow engine!☆129Updated last month
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆177Updated 11 months ago
- ☆56Updated last week
- Protect against subdomain takeover☆94Updated 3 months ago
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆133Updated 5 months ago
- ☆114Updated 2 years ago
- ☆10Updated 3 years ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆67Updated 4 months ago
- A small tool to help developers understand a huge set of security requirements from appsec teams☆47Updated 3 years ago
- Script to audit GitHub Action Workflow files for potential vulnerabilities.☆156Updated last year
- Scans your Github Actions for security issues☆86Updated this week
- DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.☆40Updated 3 years ago
- Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.☆54Updated last year
- ☆72Updated 3 weeks ago
- Convert cloudtrail data to MITRE ATT&CK Sightings☆81Updated 3 years ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆111Updated last year
- GCP CSPM using Google Sheets☆37Updated 7 months ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆36Updated last year
- A project to visualize the software supply chain☆54Updated 2 years ago
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆105Updated last year