Alternatives and similar repositories for community:

Users that are interested in community are comparing it to the libraries listed below

• developer-guy / container-image-sign-and-verify-with-cosign-and-opa
  This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)
  ☆62Updated 3 years ago
• aquasecurity / vscode-tfsec
  vscode extension for tfsec
  ☆30Updated 2 years ago
• chainguard-dev / edu
  Docs and Tutorials for Chainguard
  ☆81Updated this week
• snyk / kubernetes-monitor
  Use Snyk to find and fix vulnerabilities in your Kubernetes workloads
  ☆88Updated last week
• alcideio / iskan
  Kubernetes Native, Runtime Container Image Scanning
  ☆39Updated 2 years ago
• aquasecurity / appshield
  Security configuration checks for popular cloud native applications and infrastructure.
  ☆118Updated 3 years ago
• kubescape / sneeffer
  Sneefer is a PoC project showing how to filter out irrelevent vulnerabilities from container image vulnerability scan results. It is base…
  ☆26Updated last year
• kubernetes-sigs / wg-policy-prototypes
  A place for policy work group related proposals and prototypes.
  ☆66Updated last month
• giantswarm / starboard-exporter
  A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).
  ☆59Updated this week
• cdfoundation / sig-software-supply-chain
  SIG Software Supply Chain
  ☆15Updated 3 months ago
• chainguard-dev / github-audit-alerter
  Slack alert bot for matching Github Audit Events
  ☆10Updated 3 months ago
• aquasecurity / trivy-kubernetes
  Trivy kubernetes library
  ☆33Updated this week
• aquasecurity / starboard-octant-plugin
  Octant plugin for viewing Starboard security information
  ☆57Updated 2 years ago
• aquasecurity / defsec
  Trivy's misconfiguration scanning engine
  ☆218Updated 3 weeks ago
• fjogeleit / trivy-operator-polr-adapter
  Creates PolicyReports based on the different Trivy Operator CRDs like VulnerabilityReports
  ☆57Updated this week
• kubescape / regolibrary
  The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.
  ☆123Updated this week
• aquasecurity / postee
  Notice: Postee is no longer under active development or maintenance.
  ☆210Updated this week
• chen-keinan / kube-beacon
  Open Source runtime scanner for k8s cluster and perform security audit checks based on CIS Kubernetes Benchmark specification
  ☆65Updated last month
• sigstore / helm-charts
  Helm charts for sigstore project
  ☆70Updated last week
• kubernetes / pod-security-admission
  Kubernetes Pod Security Standards implementation - https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/2579-psp-replacem…
  ☆99Updated this week
• falcosecurity-retire / cloud-native-security-hub
  Cloud Native Security Hub - Security Resources
  ☆54Updated 4 years ago
• chainguard-dev / clank
  Simple tool that allows you to detect imposter commits in GitHub Actions workflows.
  ☆23Updated 2 months ago
• appvia / cosign-keyless-admission-webhook
  Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect
  ☆23Updated this week
• sysdiglabs / opa-image-scanner
  Kubernetes Admission Controller for Image Scanning using OPA
  ☆50Updated last year
• terraform-linters / tflint-ruleset-template
  TFLint ruleset template
  ☆36Updated last month
• wolfi-dev / wolfictl
  A CLI used to work with the Wolfi OSS project
  ☆61Updated this week
• mathieu-benoit / istio-gatekeeper-demos
  Demos and resources of the Istio + Gatekeeper talks at IstioCon 2022 and GitOpsCon 2022
  ☆14Updated last year
• Hubstation / challenges
  A repository for challenges for various tech stacks.
  ☆44Updated 4 years ago
• anchore / grype-vscode
  Grype vulnerability check plugin for Visual Studio Code
  ☆22Updated 2 months ago
• aquasecurity / cfsec
  Static analysis for CloudFormation templates to identify common misconfiguration
  ☆57Updated 3 years ago