Alternatives and similar repositories for policy-as-code

Users that are interested in policy-as-code are comparing it to the libraries listed below

• GeekMasher / advanced-security-compliance
  GitHub Advance Security Compliance Action
  ☆134Updated 2 years ago
• advanced-security / ghas-reviewer-app
  GitHub Advanced Security Pull Request Security Team required review GitHub App
  ☆36Updated last week
• advanced-security / secret-scanning-custom-patterns
  Examples of Custom Secret Scanning Patterns
  ☆165Updated 2 weeks ago
• NickLiffen / ghas-enablement
  A tool that aims to bulk automates the enablement of GitHub Code Scanning, Secret Scanning and Dependabot across multiple repositories.
  ☆157Updated last year
• advanced-security / advanced-security-material
  ☆74Updated this week
• peter-murray / github-security-report-action
  ☆81Updated last year
• theztefan / ghas-metrics-report
  GitHub Action to generate GitHub Advanced Security (GHAS) metrics report
  ☆18Updated 8 months ago
• github / ghas-jira-integration
  Synchronize GitHub Code Scanning alerts to Jira issues
  ☆93Updated 2 weeks ago
• advanced-security / probot-security-alerts
  Sample GitHub App which monitors and enforces rules for code scanning, Dependabot, and secret scanning alerts
  ☆23Updated 6 months ago
• advanced-security / ghas-to-csv
  Play with GHAS API to provide posture data over time
  ☆39Updated this week
• advanced-security / codeql-extractor-iac
  CodeQL Extractor, Library, and Queries for Infrastructure as Code
  ☆54Updated 2 weeks ago
• advanced-security / GSSAR
  GitHub Secret Scanning Auto Remediator (GSSAR)
  ☆46Updated 3 months ago
• ossf / scorecard-action
  Official GitHub Action for OpenSSF Scorecard.
  ☆338Updated last week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆193Updated 4 months ago
• zkoppert / advanced-security-enforcer
  A GitHub action for organizations that enables advanced security code scanning on all new repos
  ☆41Updated 2 weeks ago
• advanced-security / secret-scanning-review-action
  Action to detect if a secret is initially detected in a pull request
  ☆17Updated last month
• advanced-security / gh-code-scanning
  A GitHub CLI extension for GitHub Code-Scanning!
  ☆25Updated 2 years ago
• advanced-security / ghas-license-utilization
  Optimize the utilization of GHAS licenses in an enterprise (or organization)
  ☆15Updated 2 weeks ago
• NickLiffen / CodeScanningToSlack
  A solution which drops GitHub Code Scanning Results from Repositories to Slack Channels.
  ☆18Updated last year
• ossf / s2c2f
  The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…
  ☆216Updated 4 months ago
• checkmarx-ts / checkmarx-cxflow-github-action
  Checkmarx CxFlow GitHub Action with SARIF output
  ☆54Updated 5 months ago
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆511Updated 3 months ago
• advanced-security / enterprise-security-team
  Manage a uniform team of security managers for every organization in your enterprise
  ☆25Updated last week
• SvanBoxel / zaproxy-to-ghas
  Present ZAProxy results in GitHub Advanced Security
  ☆18Updated last year
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆196Updated last month
• zaproxy / action-api-scan
  A GitHub Action for running the ZAP API scan
  ☆65Updated 4 months ago
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆234Updated last year
• felickz / secret-scanning-review-action
  Action to detect if a secret is initially detected in a PR commit
  ☆11Updated 2 years ago
• anchore / sbom-action
  GitHub Action for creating software bill of materials using Syft.
  ☆204Updated last week
• advanced-security / generate-sbom-action
  An Action to wrap creating an SBOM via REST API
  ☆20Updated this week