chainguard-dev / justtrustme
☆53Updated 2 weeks ago
Alternatives and similar repositories for justtrustme:
Users that are interested in justtrustme are comparing it to the libraries listed below
- vexctl is a tool to attest VEX impact statements☆44Updated 2 years ago
- Compares and analyzes GCP IAM roles.☆77Updated last month
- ☆112Updated 3 months ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆82Updated 3 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆39Updated last year
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆104Updated 11 months ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆91Updated this week
- a tool to audit the istio service mesh☆173Updated 3 years ago
- prel(iminary) is an application that temporarily assigns Google Cloud IAM Roles and includes an approval process.☆39Updated this week
- Kubernetes audit logging, when you don't control the control plane☆73Updated this week
- An SBOM query language and associated utilities☆54Updated last year
- A tool to check the security settings of Github Organizations.☆71Updated last year
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated last year
- Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.☆30Updated 5 months ago
- ☆25Updated 11 months ago
- Clean accounts over permissions in GCP infra at scale☆71Updated last year
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated last year
- ☆56Updated 2 years ago
- ☆42Updated 5 months ago
- Automated testing, generation & manipulation of #osquery packs☆72Updated 5 months ago
- GCP CSPM using Google Sheets☆35Updated last week
- Adversary emulation for EDR/SIEM testing (macOS/Linux)☆40Updated last year
- ☆69Updated 2 months ago
- K8s Network Policy Migrator is a tool to migrate Calico or Cilium custom network policies to Kubernetes native network policy. The tool o…☆30Updated last year
- A tool to create, transform and attest VEX metadata☆134Updated this week
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆85Updated this week
- Trust Dexter to ensure that all your images are pinned by digest for better security☆29Updated last year
- kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …☆81Updated 3 weeks ago
- Static analysis for CloudFormation templates to identify common misconfiguration☆57Updated 3 years ago
- The security workflow engine!☆109Updated this week