Alternatives and similar repositories for scan-docs

Users that are interested in scan-docs are comparing it to the libraries listed below

• zapbot / zap-mgmt-scripts
  ZAP Management Scripts
  ☆23Updated 2 weeks ago
• appsecco / owasp-threat-dragon-gitlab
  OWASP Threat Dragon with Gitlab Integration
  ☆27Updated 7 years ago
• hmrc / security-git-hooks
  ☆19Updated last year
• stevespringett / owasp-risk-rating-calculator
  A Java library for programmatically calculating OWASP Risk Rating scores
  ☆18Updated 2 years ago
• DefectDojo / Community-Contribs
  DefectDojo Community Content
  ☆18Updated 2 weeks ago
• DevSlop / pixi-crs
  CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.
  ☆15Updated 4 years ago
• lightspin-tech / red-bucket-gcp
  ☆10Updated 3 years ago
• claudijd / rotten_apple
  A tool for testing continuous integration (CI) or continuous delivery (CD) system security
  ☆23Updated 12 years ago
• Threagile / run-threagile-action
  GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file
  ☆13Updated last year
• OWASP / Cloud-Native-Application-Security-Top-10
  ☆20Updated 6 years ago
• appsecco / DevOpsSecurityChecklist
  ☆14Updated 8 years ago
• andresriancho / aws-audit-automation
  Tools to automate AWS Cloud security assessments
  ☆25Updated 5 years ago
• P3tra-WP / Jupyter-Threat
  ☆14Updated 2 years ago
• semgrep / semgrep-docs
  Documentation of Semgrep: a fast, open-source, static analysis tool.
  ☆41Updated last week
• SDA-SE / cluster-image-scanner
  Discover vulnerabilities and container image misconfiguration in production environments.
  ☆56Updated 2 weeks ago
• mario-platt / ASVS-Agile-Delivery-Guide
  ☆35Updated 4 years ago
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated 2 years ago
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆95Updated last year
• ComplianceAsCode / oscal
  OSCAL SSP content for technologies shipped by Red Hat
  ☆15Updated 2 years ago
• faloker / purify
  All-in-one tool for managing vulnerability reports from AppSec pipelines
  ☆106Updated 2 years ago
• w8mej / Threat_Modeling_Bank
  A curated threat modeling library collection
  ☆22Updated last year
• franksec42 / Vulnerability-management-maturity
  Maturity Model Collaborative project
  ☆15Updated 2 years ago
• kurmiashish / S3Insights
  S3Insights is a platform for efficiently deriving security insights about S3 data through metadata analysis
  ☆12Updated last week
• we45 / ZAP-Mini-Workshop
  Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0
  ☆41Updated 2 years ago
• bitsofinfo / testssl.sh-processor
  Wrapper for concurrent batch processing of testssl.sh commands
  ☆13Updated 6 years ago
• Srendi / Better-AWS-SCAN
  ☆11Updated 8 years ago
• OWASP / cwe-tool
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
  ☆57Updated 3 weeks ago
• appsecco / kubeseco
  Application Security Workflow Automation using Docker and Kubernetes
  ☆22Updated 2 years ago
• Contrast-Security-OSS / vulnerable-spring-boot-application
  ☆14Updated last year