Alternatives and similar repositories for vexhub:

Users that are interested in vexhub are comparing it to the libraries listed below

• aquasecurity / trivy-checks
  ☆44Updated this week
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆147Updated this week
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated last year
• cloud-native-security-controls / controls-catalog
  ☆16Updated 8 months ago
• chainguard-dev / clank
  Simple tool that allows you to detect imposter commits in GitHub Actions workflows.
  ☆23Updated last month
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆61Updated last year
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆126Updated this week
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated 11 months ago
• VexStore / fatbom
  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…
  ☆32Updated 2 years ago
• aquasecurity / vscode-tfsec
  vscode extension for tfsec
  ☆30Updated 2 years ago
• RichardoC / kube-audit-rest
  Kubernetes audit logging, when you don't control the control plane
  ☆67Updated this week
• aquasecurity / trivy-plugin-referrer
  Trivy plugin for OCI referrers
  ☆22Updated 8 months ago
• anchore / yardstick
  Compare vulnerability scanners results (to make them better!)
  ☆16Updated last week
• rallyhealth / conftest-policy-packs
  Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.
  ☆58Updated last year
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated last year
• suzuki-shunsuke / tfprovidercheck
  CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…
  ☆78Updated this week
• anchore / grype-db
  ☆41Updated this week
• in-toto / archivista
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…
  ☆78Updated this week
• chainguard-dev / github-audit-alerter
  Slack alert bot for matching Github Audit Events
  ☆10Updated 2 months ago
• octo-sts / action
  ☆31Updated 2 months ago
• elastic / csp-security-policies
  Cloud Security Posture security policies
  ☆29Updated 4 months ago
• aquasecurity / trivy-kubernetes
  Trivy kubernetes library
  ☆33Updated this week
• chainguard-dev / maxcve
  ☆18Updated 9 months ago
• GoComply / oscalkit
  NIST OSCAL SDK and CLI
  ☆18Updated 6 months ago
• prancer-io / prancer-compliance-test
  This repository includes cloud security policies for IaC and live resources.
  ☆39Updated 7 months ago
• interlynk-io / sbomasm
  SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.
  ☆61Updated 2 weeks ago
• DataDog / workload-security-evaluator
  Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.
  ☆30Updated 3 months ago
• advanced-security / enterprise-security-team
  Manage a uniform team of security managers for every organization in your enterprise
  ☆17Updated 5 months ago
• niaid / terraform-aws-managed-config-rules
  AWS Config Managed Rules Terraform Module
  ☆14Updated 2 weeks ago
• aquasecurity / appshield
  Security configuration checks for popular cloud native applications and infrastructure.
  ☆118Updated 2 years ago