aquasecurity / trivy-checksLinks
☆59Updated this week
Alternatives and similar repositories for trivy-checks
Users that are interested in trivy-checks are comparing it to the libraries listed below
Sorting:
- A collection of reusable Github Actions workflows.☆142Updated last week
- Protect GitHub Actions with Tracee☆82Updated 7 months ago
- A VS Code Extension for Trivy☆148Updated last week
- Security configuration checks for popular cloud native applications and infrastructure.☆119Updated 3 years ago
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆75Updated last week
- A tool to create, transform and attest VEX metadata☆159Updated this week
- Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD☆42Updated 3 weeks ago
- ☆50Updated last week
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆231Updated this week
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆52Updated last month
- An extension for VS Code which provides support for OPA and the Rego policy language☆121Updated last week
- ☆56Updated 2 years ago
- Notice: Postee is no longer under active development or maintenance.☆208Updated last month
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Updated 2 years ago
- Add comments to pull requests where tfsec checks have failed☆169Updated 2 years ago
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆127Updated last week
- Style guide for Rego☆202Updated last week
- A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).☆61Updated this week
- GitHub Action for creating software bill of materials using Syft.☆202Updated 3 weeks ago
- Terrascan GitHub action. Scan infrastructure as code including Terraform, Kubernetes, Helm, and Kustomize file for security best practice…☆62Updated 9 months ago
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆59Updated last year
- CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…☆87Updated last week
- Trivy's misconfiguration scanning engine☆216Updated 8 months ago
- Cedar for Kubernetes brings the power of Cedar to Kubernetes authorization and admission validation, showing how cluster administrators c…☆138Updated 2 months ago
- CLI for building OPA policies into OCI images☆246Updated this week
- Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…☆145Updated last week
- A Github Action to automatically update digests for container images.☆74Updated last month
- Kubernetes audit logging, when you don't control the control plane☆85Updated this week
- Experimental: TFLint ruleset plugin for writing custom rules in Rego.☆79Updated last week
- Vanilla GitHub action to run tfsec☆59Updated 2 years ago