Alternatives and similar repositories for poutine:

Users that are interested in poutine are comparing it to the libraries listed below

• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆95Updated 2 weeks ago
• opengrep / opengrep-rules
  ☆63Updated 3 months ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious PyPI and npm packages
  ☆134Updated this week
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆177Updated last week
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆148Updated 5 months ago
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆277Updated 2 months ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆426Updated 7 months ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆319Updated this week
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆70Updated this week
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆123Updated 2 weeks ago
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆143Updated 10 months ago
• anchore / vunnel
  Tool for collecting vulnerability data from various sources (used to build the grype database)
  ☆93Updated last week
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆168Updated 3 weeks ago
• cado-security / cloudgrep
  cloudgrep is grep for cloud storage
  ☆327Updated 2 months ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆171Updated 5 months ago
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆194Updated this week
• edera-dev / am-i-isolated
  Validate the isolation posture of your container environment.
  ☆272Updated this week
• synacktiv / octoscan
  Octoscan is a static vulnerability scanner for GitHub action workflows.
  ☆208Updated 2 weeks ago
• DataDog / grimoire
  Generate datasets of cloud audit logs for common attacks
  ☆213Updated 8 months ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆70Updated last month
• latiotech / LAST
  Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  ☆166Updated this week
• smithy-security / smithy
  The security workflow engine!
  ☆110Updated this week
• DataDog / undocumented-aws-api-hunter
  A tool to uncover undocumented APIs from the AWS Console.
  ☆101Updated 5 months ago
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆87Updated 8 months ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆71Updated last year
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆229Updated 8 months ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆92Updated 11 months ago
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆154Updated 7 months ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated last year
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆58Updated last year