Alternatives and similar repositories for enterprise-security-team

Users that are interested in enterprise-security-team are comparing it to the libraries listed below

• chainguard-dev / ghscan
  Scan GitHub Actions Workflow logs for IOCs
  ☆16Updated 3 weeks ago
• google / localtoast
  ☆115Updated 5 months ago
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆78Updated 10 months ago
• github / audit-actions-workflow-runs
  Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded
  ☆79Updated 3 weeks ago
• advanced-security / secret-scanning-custom-patterns
  Examples of Custom Secret Scanning Patterns for use with GitHub Secret Protection/Advanced Security
  ☆170Updated last month
• advanced-security / advanced-security-material
  ☆75Updated last month
• advanced-security / policy-as-code
  GitHub Advanced Security Policy as Code
  ☆93Updated last month
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆100Updated 3 weeks ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆75Updated 2 years ago
• salesforce / cloud-guardrails
  Rapidly apply hundreds of security controls in Azure
  ☆183Updated 8 months ago
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆56Updated 3 months ago
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆89Updated 2 months ago
• xvnpw / sec-docs
  An experimental project using LLM technology to generate security documentation for Open Source Software (OSS) projects
  ☆34Updated 10 months ago
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆59Updated 2 years ago
• DataDog / supply-chain-firewall
  Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages
  ☆212Updated this week
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• trustoncloud / threatmodel-for-azure-storage
  Threat model for Azure Storage - Library of all the attack scenarios on Azure Storage, and how to mitigate them following a risk-based ap…
  ☆59Updated 2 years ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆114Updated this week
• DataDog / workload-security-evaluator
  ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…
  ☆37Updated last year
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆191Updated 9 months ago
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated 2 years ago
• kbroughton / azure_cis_scanner
  Security Scanner based on CIS benchmark 1.1 inspired by Scout2
  ☆54Updated 2 years ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆177Updated last month
• OWASP / OpenCRE
  ☆137Updated last week
• PaloAltoNetworks / prisma-cloud-scan
  GitHub action to scan container images with Palo Alto Networks' Prisma Cloud
  ☆58Updated last month
• PaloAltoNetworks / github-oidc-utils
  ☆37Updated 8 months ago
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆68Updated 6 months ago
• advanced-security / codeql-extractor-iac
  CodeQL Extractor, Library, and Queries for Infrastructure as Code
  ☆57Updated last week
• caizencloud / caizen
  Harness the security superpowers of your cloud asset inventory
  ☆11Updated last year
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆197Updated 7 months ago