chainguard-dev / stigsLinks
☆15Updated 3 weeks ago
Alternatives and similar repositories for stigs
Users that are interested in stigs are comparing it to the libraries listed below
Sorting:
- Helm Charts for running CrowdStrike Falcon with Kubernetes☆95Updated 2 weeks ago
- The Compliance Validator☆184Updated 2 months ago
- Xenit Terraform modules☆34Updated 2 weeks ago
- (D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.☆93Updated last month
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆102Updated last week
- Scan GitHub Actions Workflow logs for IOCs☆15Updated last month
- A tool to create, transform and attest VEX metadata☆163Updated last week
- ☆20Updated 5 months ago
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆60Updated 2 years ago
- Terraform module to provision Service Control Policies (SCP) for AWS Organizations, Organizational Units, and AWS accounts☆55Updated 4 months ago
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆53Updated last month
- ☆53Updated last week
- Cloud Security Posture security policies☆32Updated last year
- Security configuration checks for popular cloud native applications and infrastructure.☆119Updated 3 years ago
- Run individual controls or full compliance benchmarks for NSA CISA Kubernetes Hardening Guidance across all of your Kubernetes clusters u…☆31Updated 2 months ago
- For engineers and security teams driving fast and secure software supply chains☆84Updated 2 years ago
- vexctl is a tool to attest VEX impact statements☆45Updated 2 years ago
- fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…☆33Updated 3 years ago
- Terrascan GitHub action. Scan infrastructure as code including Terraform, Kubernetes, Helm, and Kustomize file for security best practice…☆63Updated 10 months ago
- An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.☆211Updated last week
- Helm Chart for deploying GUAC☆18Updated 5 months ago
- Sentinel policies for use in pre-sales workshops: https://hashicorp.github.io/workshops☆25Updated 8 months ago
- Use Snyk to find and fix vulnerabilities in your Kubernetes workloads☆93Updated 2 weeks ago
- A collection of reusable Github Actions workflows.☆146Updated this week
- GitHub Action for Copacetic: Directly patch container image vulnerabilities☆31Updated 3 months ago
- An open source, cloud-native security to protect everything from build to runtime☆323Updated this week
- A Github Action to automatically update digests for container images.☆79Updated last month
- A suite of single-purpose tools enabling automation for Terraform/Azure☆78Updated this week
- All Aqua deployments options and aquactl configuration☆61Updated last month
- Pre-commit git hooks for Open Policy Agent (OPA) and Rego development☆67Updated 4 months ago