ShiftLeftSecurity / scan-actionLinks
☆53Updated 3 years ago
Alternatives and similar repositories for scan-action
Users that are interested in scan-action are comparing it to the libraries listed below
Sorting:
- Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec☆113Updated last year
- Securing Alice's, Bob's and Carl's software supply chain using in-toto☆100Updated last month
- Security configuration checks for popular cloud native applications and infrastructure.☆119Updated 3 years ago
- Pre-commit git hooks for Open Policy Agent (OPA) and Rego development☆67Updated 4 months ago
- Github Action implementation of SLSA Provenance Generation☆50Updated last week
- GitHub Action for creating software bill of materials using Syft.☆209Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆234Updated last year
- Github action to run dependency check☆86Updated 5 months ago
- CLI for searching Rego policies☆106Updated 3 years ago
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆53Updated last month
- A GitHub action to help you scan your docker image for vulnerabilities☆222Updated 2 years ago
- Publishes BOMs to Dependency-Track from GitHub Actions☆56Updated last year
- Git action to generate security lint report for Kubernetes workload YAML files on PR☆28Updated 3 years ago
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Updated 3 years ago
- Kubernetes Common Configuration Scoring System☆122Updated 3 years ago
- GitHub actions of KICS scan - Keeping Infrastructure as Code Secure☆52Updated this week
- fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…☆33Updated 3 years ago
- A tool to create, transform and attest VEX metadata☆164Updated last week
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆60Updated 2 years ago
- ☆56Updated 2 years ago
- Sysdig Terraform provider. Allow to handle Sysdig Secure policies as code.☆54Updated last week
- Anchore container analysis and scan provided as a GitHub Action☆256Updated 2 weeks ago
- Unified Policy Engine☆65Updated 2 months ago
- A Github Action to automatically update digests for container images.☆79Updated last week
- GitHub Advance Security Compliance Action☆134Updated 2 years ago
- Add comments to pull requests where tfsec checks have failed☆169Updated 2 years ago
- A tool to check the security settings of Github Organizations.☆72Updated 2 years ago
- Trivy's misconfiguration scanning engine☆215Updated 9 months ago
- ☆251Updated 2 weeks ago
- A GitHub Action for using Conftest☆33Updated 3 years ago