TNG / cumulus
Cumulus. Threat modeling the Clouds.
☆36Updated 2 months ago
Related projects ⓘ
Alternatives and complementary repositories for cumulus
- Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev☆11Updated last month
- Discover vulnerabilities and container image misconfiguration in production environments.☆53Updated 2 months ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆169Updated this week
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆79Updated this week
- ☆25Updated last year
- The security workflow engine!☆73Updated this week
- AI featured threat modeling and security review action☆40Updated this week
- A standard API specification for exchanging supply chain artifacts and intelligence☆59Updated this week
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆61Updated last year
- App that simplifies building decision trees to model adverse scenarios☆181Updated 4 months ago
- 🖇️ STRIDE vs. ASVS equivalence table☆75Updated 2 months ago
- An online multiplayer version of the threat modeling card games: Elevation of Privilege (EoP), OWASP Cornucopia, OWASP Cumulus, and Eleva…☆62Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆221Updated 3 months ago
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆96Updated 11 months ago
- ☆18Updated 2 years ago
- Audit log wall of shame.☆41Updated last month
- Enrich SBOMs with data from third party services☆117Updated 2 weeks ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆57Updated last year
- Utility that provides an API platform for validating, querying and managing BOM data☆95Updated this week
- ☆70Updated 3 weeks ago
- A tool to check the security settings of Github Organizations.☆69Updated last year
- ☆30Updated 2 years ago
- OpenVEX Specification☆131Updated 4 months ago
- ☆80Updated this week
- ☆80Updated 3 years ago
- Demonstrates how a malicious dependency could negatively impact the build output.☆23Updated last year
- Test & Compare different Kubernetes security offerings on EKS, GKE and AKS☆34Updated 2 months ago
- ☆16Updated 6 months ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆126Updated 9 months ago
- Count distinct contributor of Snyk watched repos across several SCM☆30Updated 4 months ago