chainguard-dev / stigsLinks
☆19Updated 3 weeks ago
Alternatives and similar repositories for stigs
Users that are interested in stigs are comparing it to the libraries listed below
Sorting:
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆103Updated last week
- Helm Charts for running CrowdStrike Falcon with Kubernetes☆101Updated 2 weeks ago
- The Compliance Validator☆184Updated last month
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆60Updated 2 years ago
- vexctl is a tool to attest VEX impact statements☆45Updated 2 years ago
- ☆22Updated 3 weeks ago
- (D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.☆95Updated 3 months ago
- Cloud Security Posture security policies☆32Updated last month
- Xenit Terraform modules☆34Updated last week
- A tool to create, transform and attest VEX metadata☆170Updated 2 weeks ago
- fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…☆33Updated 3 years ago
- Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.☆70Updated last week
- Security configuration checks for popular cloud native applications and infrastructure.☆119Updated 3 years ago
- Slack alert bot for matching Github Audit Events☆10Updated last year
- Helm Chart for deploying GUAC☆18Updated 7 months ago
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆54Updated last month
- ☆253Updated 2 weeks ago
- ☆59Updated this week
- Useful scripts, Docker images, docker-compose apps, and Terraform modules.☆150Updated last week
- A Github Action to automatically update digests for container images.☆84Updated last week
- ☆18Updated last year
- Run individual controls or full compliance benchmarks for NSA CISA Kubernetes Hardening Guidance across all of your Kubernetes clusters u…☆31Updated 4 months ago
- Sentinel policies for use in pre-sales workshops: https://hashicorp.github.io/workshops☆26Updated last month
- Scan GitHub Actions Workflow logs for IOCs☆16Updated 3 weeks ago
- sigstore installation walkthrough, local☆62Updated last month
- ☆16Updated last year
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago
- Documents and tools powering the Wolfi OS community☆24Updated 3 months ago
- Pre-commit git hooks for Open Policy Agent (OPA) and Rego development☆67Updated 6 months ago
- All Aqua deployments options and aquactl configuration☆63Updated this week