arnica-ext / GitGoat
GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfiguration prevention strategy. It can be used to test products with access to GitHub repositories without a risk to your production environment.
☆167Updated last week
Related projects ⓘ
Alternatives and complementary repositories for GitGoat
- boostsecurityio/poutine☆232Updated this week
- Evaluate source control (GitHub) security posture☆249Updated last year
- Open source compliance tool for development platforms.☆286Updated last year
- Generate SBOMs with gh CLI☆168Updated 2 months ago
- Generate a score for your sbom to understand if it will actually be useful.☆221Updated 3 months ago
- Enrich SBOMs with data from third party services☆120Updated this week
- Useful scripts, Docker images, docker-compose apps, and Terraform modules.☆139Updated this week
- BadRobot - Operator Security Audit Tool☆215Updated this week
- OWASP Foundation Web Respository☆79Updated 2 months ago
- ☆109Updated last week
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆79Updated this week
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆169Updated this week
- Compares and analyzes GCP IAM roles.☆76Updated 6 months ago
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆139Updated this week
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆59Updated 8 months ago
- CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.☆267Updated 2 months ago
- ☆107Updated 2 months ago
- A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.☆181Updated 11 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆37Updated last year
- A tool to check the security settings of Github Organizations.☆69Updated last year
- ☆51Updated 8 months ago
- Documenting your Threat Models with HCL☆402Updated 2 months ago
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆775Updated last week
- Inspect certificate authorities in container images☆228Updated 6 months ago
- Test & Compare different Kubernetes security offerings on EKS, GKE and AKS☆34Updated 2 months ago
- Cloud Commotion intends to cause chaos to simulate security incidents☆140Updated 5 months ago
- CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…☆76Updated this week
- ☆47Updated last year
- An open-source collection of API key rotation tutorials.☆60Updated 2 months ago
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆117Updated this week