aquasecurity / chain-bench-actionLinks
☆19Updated 2 years ago
Alternatives and similar repositories for chain-bench-action
Users that are interested in chain-bench-action are comparing it to the libraries listed below
Sorting:
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆754Updated 8 months ago
- ☆243Updated last week
- Evaluate source control (GitHub) security posture☆252Updated 2 years ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆492Updated last week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆815Updated 4 months ago
- The Compliance Validator☆182Updated this week
- ☆16Updated last year
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆576Updated 4 months ago
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆210Updated 2 months ago
- A utility to generate SPDX-compliant Bill of Materials manifests☆402Updated this week
- A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles☆535Updated 2 months ago
- SBOM Assess - Evaluate SBOM quality and compliance☆221Updated last week
- Generate a score for your sbom to understand if it will actually be useful.☆231Updated 11 months ago
- Evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more☆478Updated this week
- Open source compliance tool for development platforms.☆288Updated last year
- All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.☆356Updated last week
- Language-agnostic SLSA provenance generation for Github Actions☆491Updated last month
- A reading list for software supply-chain security.☆363Updated 2 years ago
- Visualizer for GUAC☆28Updated 2 weeks ago
- A curated list of resources about detecting threats and defending Kubernetes systems.☆389Updated last year
- Enrich SBOMs with data from third party services☆183Updated this week
- Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…☆861Updated this week
- Regal is a linter and language server for Rego, bringing your policy development experience to the next level!☆320Updated this week
- A curated list of OPA related tools, frameworks and articles☆832Updated 2 months ago
- Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package manager…☆750Updated this week
- By scanning CI/CD misconfigurations, Allero helps reduce production issues, harden your security posture and shift-left CI/CD from DevOps…☆205Updated 2 years ago
- Type safe K8s middleware for humans☆175Updated this week
- Catalogue all images of a Kubernetes cluster to multiple targets with Syft☆203Updated last week
- Search an SBOM for licenses and the packages they belong to☆99Updated this week
- ☆16Updated last year