Alternatives and similar repositories for scan-action:

Users that are interested in scan-action are comparing it to the libraries listed below

• semgrep / semgrep-action
  This project is deprecated. Use https://github.com/returntocorp/semgrep instead
  ☆73Updated 10 months ago
• philips-labs / slsa-provenance-action
  Github Action implementation of SLSA Provenance Generation
  ☆47Updated this week
• snyk / snyk-docker-plugin
  This plugin provides dependency metadata for Docker images
  ☆33Updated this week
• aquasecurity / vscode-tfsec
  vscode extension for tfsec
  ☆30Updated 2 years ago
• sysdiglabs / k8s-security-configwatch
  Git action to generate security lint report for Kubernetes workload YAML files on PR
  ☆29Updated 2 years ago
• rallyhealth / conftest-policy-packs
  Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.
  ☆58Updated last year
• triat / terraform-security-scan
  Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec
  ☆112Updated 4 months ago
• VexStore / fatbom
  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…
  ☆32Updated 2 years ago
• aquasecurity / tfsec-pr-commenter-action
  Add comments to pull requests where tfsec checks have failed
  ☆167Updated last year
• aquasecurity / trivy-checks
  ☆46Updated this week
• anchore / sbom-action
  GitHub Action for creating software bill of materials using Syft.
  ☆176Updated 3 weeks ago
• slsa-framework / github-actions-demo
  Proof-of-concept SLSA provenance generator for GitHub Actions
  ☆99Updated 2 years ago
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆94Updated 4 months ago
• GeekMasher / advanced-security-compliance
  GitHub Advance Security Compliance Action
  ☆132Updated 2 years ago
• advanced-security / policy-as-code
  GitHub Advanced Security Policy as Code
  ☆79Updated this week
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆71Updated last year
• sysdiglabs / terraform-provider-sysdig
  Sysdig Terraform provider. Allow to handle Sysdig Secure policies as code.
  ☆52Updated this week
• aquasecurity / tfsec-sarif-action
  ☆54Updated last year
• dependency-check / Dependency-Check_Action
  Github action to run dependency check
  ☆74Updated 6 months ago
• Checkmarx / kics-github-action
  GitHub actions of KICS scan - Keeping Infrastructure as Code Secure
  ☆47Updated 2 weeks ago
• xen0l / iam-lint
  Github action for linting AWS IAM policy documents
  ☆37Updated 2 years ago
• advanced-security / GSSAR
  GitHub Secret Scanning Auto Remediator (GSSAR)
  ☆44Updated last year
• aquasecurity / appshield
  Security configuration checks for popular cloud native applications and infrastructure.
  ☆118Updated 3 years ago
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆128Updated this week
• aquasecurity / cfsec
  Static analysis for CloudFormation templates to identify common misconfiguration
  ☆57Updated 3 years ago
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆50Updated 4 months ago
• hupe1980 / cdk-threagile
  Agile Threat Modeling as Code
  ☆13Updated 2 years ago
• CycloneDX / license-scanner
  Utility that provides an API and CLI to identify licenses and legal terms
  ☆43Updated 8 months ago
• communitysec / sbom-hall-of-fame
  A place for the InfoSec community to share and celebrate real stories of organizations successfully using SBOMs (and other bills of mater…
  ☆42Updated last year
• sonatype-nexus-community / ahab
  ahab is a tool to check for vulnerabilities in your apt, apk, or yum powered operating systems, powered by Sonatype OSS Index.
  ☆68Updated 10 months ago