An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.
☆772Dec 11, 2024Updated last year
Alternatives and similar repositories for chain-bench
Users that are interested in chain-bench are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆21Nov 24, 2022Updated 3 years ago
- ☆17Sep 4, 2025Updated last year
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆614Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆892Aug 31, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Linux Runtime Security and Forensics using eBPF☆4,659Oct 1, 2026Updated 3 weeks ago
- A reading list for software supply-chain security.☆364Nov 21, 2022Updated 3 years ago
- Keyless Git signing using Sigstore☆1,134Updated this week
- Notice: Postee is no longer under active development or maintenance.☆204Aug 31, 2026Updated last month
- Threat matrix for CI/CD Pipeline☆772May 31, 2026Updated 4 months ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,572Updated this week
- Security configuration checks for popular cloud native applications and infrastructure.☆119Feb 16, 2022Updated 4 years ago
- library for adding comments to git PRs☆16Oct 23, 2026Updated last week
- Language-agnostic SLSA provenance generation for Github Actions☆607Aug 7, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆627Feb 10, 2026Updated 8 months ago
- Cloud Security Posture Management (CSPM)☆3,783Sep 22, 2026Updated last month
- in-toto is a framework to protect supply chain integrity.☆1,052Aug 27, 2026Updated 2 months ago
- Supply-chain Levels for Software Artifacts☆1,951Oct 22, 2026Updated last week
- Code signing and transparency for containers and binaries☆6,397Updated this week
- ☆432Jan 18, 2023Updated 3 years ago
- 🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!☆2,267Dec 8, 2025Updated 10 months ago
- Tfsec is now part of Trivy☆7,059Mar 25, 2026Updated 7 months ago
- Open source compliance tool for development platforms.☆286Oct 30, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆9,792Updated this week
- OWASP Foundation Web Respository☆621Sep 11, 2026Updated last month
- OpenSSF Scorecard - Security health metrics for Open Source☆5,796Updated this week
- Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.☆5,214Nov 20, 2025Updated 11 months ago
- Trivy's misconfiguration scanning engine☆214Jan 23, 2025Updated last year
- OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure☆1,460May 25, 2026Updated 5 months ago
- Documenting your Threat Models with HCL☆470Updated this week
- Evaluate source control (GitHub) security posture☆251Mar 8, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more☆38,833Updated this week
- Docker Desktop Extension for Trivy☆26Feb 14, 2026Updated 8 months ago
- A vulnerability scanner for container images and filesystems☆13,140Updated this week
- Vulnerability scanning just got lazier☆328Oct 21, 2026Updated last week
- Granular, Actionable Adversary Emulation for the Cloud☆2,434Updated this week
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,726Updated this week
- A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles☆602May 27, 2026Updated 5 months ago