ShiftLeftSecurity / scan-action

Related projects ⓘ

Alternatives and complementary repositories for scan-action

• philips-labs / slsa-provenance-action
  Github Action implementation of SLSA Provenance Generation
  ☆47Updated this week
• rallyhealth / conftest-policy-packs
  Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.
  ☆58Updated last year
• VexStore / fatbom
  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…
  ☆32Updated 2 years ago
• triat / terraform-security-scan
  Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec
  ☆112Updated last month
• sysdiglabs / terraform-provider-sysdig
  Sysdig Terraform provider. Allow to handle Sysdig Secure policies as code.
  ☆49Updated this week
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆69Updated last year
• semgrep / semgrep-action
  This project is deprecated. Use https://github.com/returntocorp/semgrep instead
  ☆73Updated 7 months ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆120Updated this week
• advanced-security / GSSAR
  GitHub Secret Scanning Auto Remediator (GSSAR)
  ☆44Updated last year
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆93Updated last month
• aquasecurity / vscode-tfsec
  vscode extension for tfsec
  ☆30Updated last year
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆221Updated 3 months ago
• GeekMasher / advanced-security-compliance
  GitHub Advance Security Compliance Action
  ☆132Updated last year
• snyk / broker
  A broker system between a public service and a private service
  ☆100Updated this week
• aquasecurity / trivy-checks
  ☆40Updated this week
• ovotech / cloud-key-rotator
  A Golang program to rotate AWS & GCP account keys
  ☆65Updated 2 months ago
• SummitRoute / aws_research
  Public tables and other research that can accept PRs. Please visit the web link.
  ☆44Updated 5 years ago
• xen0l / iam-lint
  Github action for linting AWS IAM policy documents
  ☆36Updated last year
• edplato / trufflehog-actions-scan
  Scan repository for secrets with basic defaults in place for easy setup.
  ☆22Updated 2 weeks ago
• dowjones / reapsaw
  Reapsaw is a continuous security devsecops tool, which helps in enabling security into CI/CD Pipeline. It supports coverage for multiple …
  ☆41Updated 4 years ago
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆119Updated this week
• aquasecurity / cfsec
  Static analysis for CloudFormation templates to identify common misconfiguration
  ☆58Updated 2 years ago
• reload / github-security-jira
  Github Action for integrating Security Alerts with JIRA
  ☆53Updated this week
• cloud-native-security-controls / controls-catalog
  ☆16Updated 6 months ago
• advanced-security / generate-sbom-action
  An Action to wrap creating an SBOM via REST API
  ☆15Updated 2 months ago
• dependency-check / Dependency-Check_Action
  Github action to run dependency check
  ☆71Updated 3 months ago
• marqeta / terraform-provider-dfd
  A Terraform Provider for Creating Data Flow Diagrams
  ☆12Updated 5 years ago
• Vulnetix / vulnetix
  Automate vulnerability triage which prioritizes remediation over discovery
  ☆14Updated this week
• snyk / snyk-docker-plugin
  This plugin provides dependency metadata for Docker images
  ☆32Updated this week