Alternatives and similar repositories for malcontent

Users that are interested in malcontent are comparing it to the libraries listed below

• edera-dev / am-i-isolated
  Validate the isolation posture of your container environment.
  ☆296Updated this week
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆324Updated this week
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆492Updated this week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆308Updated last week
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious npm and PyPI packages
  ☆153Updated this week
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆432Updated 2 months ago
• gittuf / gittuf
  A security layer for Git repositories
  ☆537Updated this week
• kondukto-io / kntrl
  kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …
  ☆116Updated 2 months ago
• owasp-dep-scan / blint
  BLint is a Binary Linter to check the security properties, and capabilities in your executables. Since v2, blint is also an SBOM generato…
  ☆394Updated last week
• openvex / spec
  OpenVEX Specification
  ☆156Updated 2 months ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated 2 weeks ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆322Updated last week
• google / osv-scalibr
  OSV-SCALIBR: A library for Software Composition Analysis
  ☆398Updated last week
• bgeesaman / malicious-compliance
  Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"
  ☆67Updated last year
• chainguard-dev / ssc-reading-list
  A reading list for software supply-chain security.
  ☆363Updated 2 years ago
• TupleType / awesome-cicd-attacks
  Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  ☆534Updated 5 months ago
• DataDog / guarddog
  GuardDog is a CLI tool to Identify malicious PyPI and npm packages
  ☆778Updated 2 weeks ago
• praetorian-inc / gato
  GitHub Actions Pipeline Enumeration and Attack Tool
  ☆689Updated last month
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆574Updated 4 months ago
• DataDog / KubeHound
  Tool for building Kubernetes attack paths
  ☆896Updated 2 weeks ago
• anchore / vunnel
  Tool for collecting vulnerability data from various sources (used to build the grype database)
  ☆101Updated this week
• chainguard-dev / osquery-defense-kit
  Production-ready detection & response queries for osquery
  ☆581Updated last week
• CycodeLabs / cimon-action
  Runtime Security Solution for your CI/CD Pipeline
  ☆108Updated last month
• jatrost / awesome-kubernetes-threat-detection
  A curated list of resources about detecting threats and defending Kubernetes systems.
  ☆387Updated last year
• ReversecLabs / IceKube
  ☆179Updated 3 months ago
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆215Updated last year
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆181Updated 2 weeks ago
• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆135Updated last year
• antitree / seccomp-diff
  ☆81Updated last month
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆89Updated 3 months ago