aquasecurity / vexhubLinks
☆30Updated this week
Alternatives and similar repositories for vexhub
Users that are interested in vexhub are comparing it to the libraries listed below
Sorting:
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆78Updated last week
- ☆62Updated this week
- fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…☆33Updated 3 years ago
- Runtime Security Solution for your CI/CD Pipeline☆112Updated 3 weeks ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆111Updated 11 months ago
- kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …☆123Updated 2 months ago
- A tool to create, transform and attest VEX metadata☆168Updated this week
- ☆16Updated last year
- ☆114Updated 4 months ago
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆107Updated this week
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆103Updated last year
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆284Updated this week
- vexctl is a tool to attest VEX impact statements☆45Updated 2 years ago
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago
- Format agnostic SBOM tooling☆123Updated 3 weeks ago
- Security configuration checks for popular cloud native applications and infrastructure.☆119Updated 3 years ago
- Manage a uniform team of security managers for every organization in your enterprise☆25Updated 2 weeks ago
- Generate a score for your sbom to understand if it will actually be useful.☆234Updated last year
- A standard API specification for exchanging supply chain artifacts and intelligence☆95Updated last month
- Run Falco in a GitHub Actions to detect suspicious behavior in your CI/CD☆42Updated last month
- An SBOM query language and associated utilities☆54Updated last year
- Generate SBOMs with gh CLI☆196Updated 6 months ago
- Microsoft Defender for Cloud threat matrix for Kubernetes☆30Updated 2 years ago
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆221Updated 6 months ago
- Kubernetes audit logging, when you don't control the control plane☆90Updated last week
- A tool to check the security settings of Github Organizations.☆72Updated 2 years ago
- Protect GitHub Actions with Tracee☆80Updated 10 months ago
- A VS Code Extension for Trivy☆155Updated last week
- ☆57Updated last week
- a tool to audit the istio service mesh☆173Updated 4 years ago