aquasecurity / vexhub
☆23Updated last month
Alternatives and similar repositories for vexhub
Users that are interested in vexhub are comparing it to the libraries listed below
Sorting:
- ☆52Updated this week
- vexctl is a tool to attest VEX impact statements☆44Updated 2 years ago
- fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…☆32Updated 2 years ago
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆64Updated 3 weeks ago
- An SBOM query language and associated utilities☆54Updated last year
- A tool to create, transform and attest VEX metadata☆136Updated last week
- A tool to check the security settings of Github Organizations.☆71Updated last year
- Protect GitHub Actions with Tracee☆81Updated 3 months ago
- Slack alert bot for matching Github Audit Events☆10Updated 6 months ago
- Format agnostic SBOM tooling☆106Updated this week
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆84Updated 4 months ago
- A place to systematically store software bill of materials (SBOM) documents.☆46Updated last year
- SBOM Search - Context aware search in SBOM repositories☆25Updated this week
- ☆112Updated 4 months ago
- Check SPDX SBOM for NTIA minimum elements☆61Updated 2 weeks ago
- Trivy plugin for OCI referrers☆23Updated last year
- A standard API specification for exchanging supply chain artifacts and intelligence☆79Updated this week
- ☆16Updated last year
- CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…☆85Updated this week
- SBOM Edit - Conditional edits and merging of SBOMs☆69Updated this week
- Microsoft Defender for Cloud threat matrix for Kubernetes☆25Updated 2 years ago
- Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.☆31Updated 7 months ago
- ☆86Updated 2 months ago
- GitHub Action for Copacetic: Directly patch container image vulnerabilities☆28Updated last year
- Kubernetes audit logging, when you don't control the control plane☆77Updated last week
- Compare vulnerability scanners results (to make them better!)☆16Updated 3 weeks ago
- A BOM repository server for distributing CycloneDX BOMs☆77Updated last year
- ☆42Updated 6 months ago
- vscode extension for tfsec☆30Updated 2 years ago