aquasecurity / trivy-checksLinks
☆58Updated last week
Alternatives and similar repositories for trivy-checks
Users that are interested in trivy-checks are comparing it to the libraries listed below
Sorting:
- A collection of reusable Github Actions workflows.☆141Updated last week
- Security configuration checks for popular cloud native applications and infrastructure.☆119Updated 3 years ago
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆75Updated last week
- Protect GitHub Actions with Tracee☆82Updated 7 months ago
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆225Updated this week
- Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD☆42Updated last week
- A tool to create, transform and attest VEX metadata☆155Updated this week
- CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…☆87Updated last week
- Add comments to pull requests where tfsec checks have failed☆169Updated last year
- Style guide for Rego☆200Updated 5 months ago
- Kubernetes audit logging, when you don't control the control plane☆85Updated last week
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆52Updated 2 weeks ago
- A VS Code Extension for Trivy☆148Updated last week
- ☆46Updated 2 weeks ago
- Sysdig Terraform provider. Allow to handle Sysdig Secure policies as code.☆54Updated last month
- Trivy's misconfiguration scanning engine☆216Updated 7 months ago
- Runtime security plug to protect user containers☆66Updated last week
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆125Updated last week
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆59Updated last year
- An extension for VS Code which provides support for OPA and the Rego policy language☆120Updated last week
- Run tfsec with reviewdog on pull requests to enforce security best practices☆77Updated this week
- An SBOM query language and associated utilities☆54Updated last year
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Updated 2 years ago
- BadRobot - Operator Security Audit Tool☆223Updated last week
- Catalogue all images of a Kubernetes cluster to multiple targets with Syft☆206Updated 2 weeks ago
- Notice: Postee is no longer under active development or maintenance.☆208Updated 2 weeks ago
- Use Snyk to find and fix vulnerabilities in your Kubernetes workloads☆92Updated this week
- ☆56Updated 2 years ago
- CLI for building OPA policies into OCI images☆245Updated 2 weeks ago
- A Github Action to automatically update digests for container images.☆73Updated 3 weeks ago