Alternatives and similar repositories for poutine

Users that are interested in poutine are comparing it to the libraries listed below

• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated 2 weeks ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious npm and PyPI packages
  ☆153Updated this week
• opengrep / opengrep-rules
  ☆79Updated 6 months ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆322Updated last week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆174Updated 8 months ago
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆152Updated 8 months ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆432Updated 2 months ago
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆187Updated 3 months ago
• smithy-security / smithy
  The security workflow engine!
  ☆119Updated last week
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆89Updated 3 months ago
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆813Updated 4 months ago
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆215Updated last year
• step-security / github-actions-goat
  GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment
  ☆478Updated last month
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆130Updated 3 months ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆143Updated last year
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆294Updated last week
• edera-dev / am-i-isolated
  Validate the isolation posture of your container environment.
  ☆296Updated this week
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆155Updated 11 months ago
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated last year
• AdnaneKhan / gato-x
  GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
  ☆382Updated 2 weeks ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆70Updated last month
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆209Updated this week
• apiiro / malicious-code-ruleset
  Focused malicious code detection ruleset, with a high protection-to-noise ratio
  ☆123Updated 5 months ago
• kondukto-io / kntrl
  kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …
  ☆116Updated 2 months ago
• synacktiv / octoscan
  Octoscan is a static vulnerability scanner for GitHub action workflows.
  ☆218Updated 3 months ago
• OWASP / OpenCRE
  ☆119Updated this week
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆97Updated 6 months ago
• TupleType / awesome-cicd-attacks
  Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  ☆534Updated 5 months ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆92Updated 2 weeks ago