boostsecurityio / poutineLinks
boostsecurityio/poutine
☆351Updated last month
Alternatives and similar repositories for poutine
Users that are interested in poutine are comparing it to the libraries listed below
Sorting:
- Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages☆210Updated last week
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆114Updated this week
- Gram is Klarna's own threat model diagramming tool☆330Updated last week
- A full insecure kubernetes application for testing security tools☆91Updated 2 months ago
- Documenting your Threat Models with HCL☆440Updated this week
- RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…☆158Updated last year
- The security workflow engine!☆136Updated last month
- ☆193Updated 8 months ago
- An open-source collection of API key rotation tutorials.☆76Updated 3 months ago
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆825Updated 9 months ago
- App that simplifies building decision trees to model adverse scenarios☆220Updated last year
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…☆69Updated last month
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆177Updated 2 weeks ago
- GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment☆488Updated 6 months ago
- boostsecurityio/lotp☆138Updated 2 months ago
- GitHub Actions Pipeline Enumeration and Attack Tool☆723Updated 3 months ago
- Octoscan is a static vulnerability scanner for GitHub action workflows.☆240Updated 3 weeks ago
- Cloud Commotion intends to cause chaos to simulate security incidents☆146Updated last year
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆315Updated 2 months ago
- A tool to check the security settings of Github Organizations.☆75Updated 2 years ago
- kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …☆125Updated 3 months ago
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆214Updated this week
- GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.☆468Updated 2 weeks ago
- Validate the isolation posture of your container environment.☆309Updated last week
- HashiCorp-relevant rules for the Semgrep code analysis tool☆41Updated 2 years ago
- GitGuardian Canary Tokens☆145Updated 6 months ago
- Scans your Github Actions for security issues☆88Updated last month
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆597Updated 9 months ago
- Script to audit GitHub Action Workflow files for potential vulnerabilities.☆156Updated last year
- OWASP Foundation Web Respository☆100Updated last week