Alternatives and similar repositories for ssc-reading-list

Users that are interested in ssc-reading-list are comparing it to the libraries listed below

• buildsec / frsca
  ☆236Updated 2 weeks ago
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆138Updated 2 years ago
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆482Updated this week
• bureado / awesome-software-supply-chain-security
  A compilation of resources in the software supply chain security domain, with emphasis on open source
  ☆320Updated 2 years ago
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆229Updated 9 months ago
• ossf / s2c2f
  The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…
  ☆208Updated last week
• ossf / wg-supply-chain-integrity
  Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …
  ☆185Updated last year
• in-toto / attestation
  in-toto Attestation Framework
  ☆274Updated 2 weeks ago
• openvex / spec
  OpenVEX Specification
  ☆150Updated this week
• kubernetes-sigs / bom
  A utility to generate SPDX-compliant Bill of Materials manifests
  ☆390Updated 2 weeks ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆430Updated this week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆172Updated 6 months ago
• controlplaneio / badrobot
  BadRobot - Operator Security Audit Tool
  ☆220Updated 2 weeks ago
• rad-security / kbom
  KBOM - Kubernetes Bill of Materials
  ☆315Updated 2 months ago
• kubernetes / sig-security
  Process documentation, non-code deliverables, and miscellaneous artifacts of Kubernetes SIG Security
  ☆205Updated 3 weeks ago
• aquasecurity / defsec
  Trivy's misconfiguration scanning engine
  ☆218Updated 4 months ago
• in-toto / in-toto
  in-toto is a framework to protect supply chain integrity.
  ☆929Updated last week
• tektoncd / chains
  Supply Chain Security in Tekton Pipelines
  ☆257Updated this week
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆139Updated 2 weeks ago
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆263Updated 2 weeks ago
• ossf / tac
  Technical Advisory Council
  ☆124Updated last week
• aquasecurity / chain-bench
  An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…
  ☆748Updated 5 months ago
• microsoft / oss-ssc-framework
  Open Source Software Secure Supply Chain Framework
  ☆235Updated 2 years ago
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆751Updated 10 months ago
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆194Updated 2 months ago
• oracle / macaron
  Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD …
  ☆157Updated this week
• awesomeSBOM / awesome-sbom
  A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles
  ☆523Updated 2 weeks ago
• mindersec / minder
  Software Supply Chain Security Platform
  ☆337Updated this week
• PaloAltoNetworks / rbac-police
  Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego
  ☆345Updated 2 months ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆173Updated 2 months ago