aquasecurity / trivy-checks
☆51Updated this week
Alternatives and similar repositories for trivy-checks:
Users that are interested in trivy-checks are comparing it to the libraries listed below
- Kubernetes audit logging, when you don't control the control plane☆74Updated this week
- CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…☆85Updated this week
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆63Updated last week
- Protect GitHub Actions with Tracee☆81Updated 2 months ago
- Trivy plugin for OCI referrers☆23Updated 11 months ago
- ☆42Updated 6 months ago
- A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).☆61Updated this week
- vexctl is a tool to attest VEX impact statements☆44Updated 2 years ago
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆189Updated this week
- A tool to create, transform and attest VEX metadata☆134Updated last week
- Dynamic GitHub Actions from Wolfi packages☆43Updated 11 months ago
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆49Updated last year
- A VS Code Extension for Trivy☆131Updated this week
- Security configuration checks for popular cloud native applications and infrastructure.☆118Updated 3 years ago
- A collection of reusable Github Actions workflows.☆130Updated this week
- An admission controller service and kubectl plugin to handle container drift in K8s clusters☆124Updated 3 years ago
- An SBOM query language and associated utilities☆54Updated last year
- Kubernetes Admission Controller for Image Scanning using OPA☆50Updated last year
- Creates PolicyReports based on the different Trivy Operator CRDs like VulnerabilityReports☆59Updated last week
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆58Updated last year
- Kubescape can run as a set of microservices inside a Kubernetes cluster. This allows you to continually monitor the status of a cluster, …☆33Updated this week
- ☆19Updated last week
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆89Updated this week
- TFLint ruleset template☆39Updated last week
- Github Action to automatically update digests for container images.☆58Updated last month
- vscode extension for tfsec☆30Updated 2 years ago
- tfclean is tool to remove applied moved block, import block, etc☆48Updated 2 weeks ago
- Trust Dexter to ensure that all your images are pinned by digest for better security☆29Updated last year
- ☆12Updated 3 months ago
- Scans SBOMs for vulnerabilities with Grype☆80Updated last week