Alternatives and similar repositories for GitGoat

Users that are interested in GitGoat are comparing it to the libraries listed below

• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆251Updated 2 years ago
• marco-lancini / utils
  Useful scripts, Docker images, docker-compose apps, and Terraform modules.
  ☆151Updated last week
• orcasecurity / orca-toolbox
  ☆122Updated 5 months ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆112Updated last week
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆288Updated last year
• wiz-sec-public / namespacehound
  NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.
  ☆111Updated 9 months ago
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆339Updated 2 weeks ago
• turbot / steampipe-mod-aws-perimeter
  Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrust…
  ☆112Updated last month
• suzuki-shunsuke / tfprovidercheck
  CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…
  ☆87Updated last week
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 7 months ago
• hysnsec / awesome-policy-as-code
  A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
  ☆197Updated last year
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆89Updated last year
• Resourcely-Inc / cloud-guardrails
  Open-source best practices for protecting a secure, sensible cloud platform
  ☆128Updated last year
• orcasecurity-research / kte
  Test & Compare different Kubernetes security offerings on EKS, GKE and AKS
  ☆40Updated last year
• DataDog / supply-chain-firewall
  Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages
  ☆168Updated this week
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆105Updated last year
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• iacsecurity / tool-compare
  ☆285Updated 2 years ago
• CycodeLabs / cimon-action
  Runtime Security Solution for your CI/CD Pipeline
  ☆110Updated 4 months ago
• tuladhar / cleanup-aws-access-keys
  A cloud security tool to search and clean up unused AWS access keys, written in Go.
  ☆51Updated 3 years ago
• mondoohq / cnspec
  An open source, cloud-native security to protect everything from build to runtime
  ☆322Updated this week
• jetstack / paranoia
  Inspect certificate authorities in container images
  ☆238Updated last week
• gblues / aws-ml-opt-out
  A Terraform module that makes it a snap to opt out of all AWS AI/ML data harvesting.
  ☆30Updated last year
• raesene / container-security-site
  ☆102Updated 8 months ago
• iKnowJavaScript / terraform-aws-vulne-soldier
  This Terraform module consists of the configuration for automating the remediation of AWS EC2 vulnerabilities using AWS Inspector finding…
  ☆49Updated 3 months ago
• chainguard-dev / dfc
  (D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.
  ☆92Updated last month
• welldone-cloud / aws-lint-iam-policies
  Runs IAM policy linting and security checks against either a single AWS account or multiple member accounts of an AWS Organization.
  ☆150Updated 2 months ago
• google / localtoast
  ☆115Updated 2 months ago
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆289Updated last year
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆106Updated 2 years ago