Alternatives and similar repositories for cumulus

Users that are interested in cumulus are comparing it to the libraries listed below

• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 5 months ago
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆216Updated last year
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆432Updated 2 months ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious npm and PyPI packages
  ☆155Updated this week
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated last week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆174Updated 8 months ago
• orcasecurity-research / kte
  Test & Compare different Kubernetes security offerings on EKS, GKE and AKS
  ☆40Updated 11 months ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• DataDog / workload-security-evaluator
  Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.
  ☆31Updated 9 months ago
• SDA-SE / cluster-image-scanner
  Discover vulnerabilities and container image misconfiguration in production environments.
  ☆56Updated 2 weeks ago
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆308Updated last week
• PaloAltoNetworks / github-oidc-utils
  ☆35Updated 3 months ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• Betterment / claws
  💅🏽 analyzes your github actions
  ☆93Updated last month
• smithy-security / smithy
  The security workflow engine!
  ☆119Updated this week
• DataDog / attache
  Attaché provides an emulation layer for Cloud Provider IMDS APIs
  ☆58Updated last year
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• somethingnew2-0 / SimpleCSPM
  GCP CSPM using Google Sheets
  ☆36Updated 4 months ago
• devops-kung-fu / trustier
  Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev
  ☆11Updated 2 months ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆92Updated 3 weeks ago
• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆136Updated last year
• wiz-sec-public / peach-framework
  PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…
  ☆71Updated 2 years ago
• semgr8ns / semgr8s
  Semgrep-based Policy Controller for Kubernetes
  ☆47Updated 4 months ago
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆189Updated 3 months ago
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated last year
• wiz-sec-public / namespacehound
  NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.
  ☆107Updated 7 months ago
• marco-lancini / utils
  Useful scripts, Docker images, docker-compose apps, and Terraform modules.
  ☆150Updated last week
• GoogleCloudPlatform / active-assist
  ☆25Updated last year
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆288Updated last year
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆155Updated 11 months ago