cdfoundation / CICD-CybersecurityLinks
CI/CD pipelines are critical touchpoints in modern software development where code-level vulnerabilities, container security, and vulnerability remediation efforts converge. This SIG is dedicated to advancing security tooling within CI/CD pipelines, with a focus on defining best security practices and developing frameworks for secure pipeline.
☆22Updated this week
Alternatives and similar repositories for CICD-Cybersecurity
Users that are interested in CICD-Cybersecurity are comparing it to the libraries listed below
Sorting:
- SIG Software Supply Chain☆16Updated last year
- Instructions and scripts how to deploy Keptn on K3s☆29Updated 3 years ago
- This is the source repository for https://bestpractices.cd.foundation☆14Updated last year
- Docs and Tutorials for Chainguard☆88Updated this week
- Validate the SPDX SBOM against NTIA, CISA, and other minimum element requirements.☆79Updated this week
- GitHub actions of KICS scan - Keeping Infrastructure as Code Secure☆52Updated last month
- 📈CNCF-created tool for analyzing and graphing developer contributions☆118Updated last week
- Examples for demonstrating keptn use cases☆22Updated 2 years ago
- Scenario examples for Killercoda.com☆126Updated last month
- 📜Fork for tracking CNCF projects☆75Updated last week
- Use Snyk to find and fix vulnerabilities in your Kubernetes workloads☆95Updated this week
- Documentation for users of Jenkins project infrastructure☆25Updated 2 weeks ago
- Examples of SPDX files for software combinations☆142Updated 2 months ago
- CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices☆144Updated last week
- GitHub Action for creating software bill of materials using Syft.☆219Updated this week
- Contains every things needed to release jenkins core from the jenkins infra project☆17Updated this week
- CDF Interoperability SIG☆67Updated last year
- GitHub app for SBOM creation using cdxgen and upload to Dependency-Track☆22Updated this week
- CDF Events Special Interest Group☆51Updated last year
- in-toto is a framework to secure the software supply chain.☆71Updated 2 months ago
- A VS Code Extension for Trivy☆164Updated this week
- ☆30Updated last year
- Terrascan GitHub action. Scan infrastructure as code including Terraform, Kubernetes, Helm, and Kustomize file for security best practice…☆65Updated last year
- The Aqua Security Provider for Terraform allows you to declaratively define the configuration of your Aqua platform.☆37Updated last week
- Static Code Analyser for Infrastructure-as-Code languages such as CloudFormation and Terraform as well as DevOps like Docker and Kuberne…☆56Updated last week
- The Cartografos working group aims to provide tools to help adopters and end-users to navigate the CNCF landscape and the wider cloud nat…☆142Updated 4 months ago
- Start securing your secrets and infrastructure by installing Conjur OSS, using Docker and the official Conjur OSS containers on DockerHub…☆38Updated last month
- ☆15Updated 3 years ago
- Plugin for Docker CLI to support SBOM creation using Syft☆161Updated 2 months ago
- Cross tooling and interoperability specifications☆175Updated 8 months ago