chainguard-dev / stigsLinks
☆17Updated last week
Alternatives and similar repositories for stigs
Users that are interested in stigs are comparing it to the libraries listed below
Sorting:
- The Compliance Validator☆184Updated last month
- An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.☆220Updated last week
- Helm Charts for running CrowdStrike Falcon with Kubernetes☆97Updated this week
- Scan GitHub Actions Workflow logs for IOCs☆15Updated this week
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆103Updated last week
- ☆21Updated last week
- ☆253Updated last week
- A tool to create, transform and attest VEX metadata☆168Updated last week
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆60Updated 2 years ago
- (D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.☆95Updated 2 months ago
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆54Updated 3 weeks ago
- fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…☆33Updated 3 years ago
- A compliance analysis tool which enables organizations to more quickly articulate their compliance posture and also generate supporting e…☆53Updated 2 months ago
- Run individual controls or full compliance benchmarks for NSA CISA Kubernetes Hardening Guidance across all of your Kubernetes clusters u…☆31Updated 3 months ago
- vexctl is a tool to attest VEX impact statements☆45Updated 2 years ago
- BigBang the product☆194Updated this week
- sigstore the hard way!☆116Updated 4 months ago
- ☆69Updated last week
- A collection of reusable Github Actions workflows.☆153Updated 3 weeks ago
- Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.☆68Updated this week
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago
- ☆16Updated last year
- Pre-commit git hooks for Open Policy Agent (OPA) and Rego development☆67Updated 5 months ago
- A Github Action to automatically update digests for container images.☆81Updated this week
- Open source tool for processing OSCAL based FedRAMP SSPs☆43Updated last year
- GitHub Action for Copacetic: Directly patch container image vulnerabilities☆31Updated last week
- Slack alert bot for matching Github Audit Events☆10Updated last year
- Cloud Security Posture security policies☆32Updated 3 weeks ago
- Security configuration checks for popular cloud native applications and infrastructure.☆119Updated 3 years ago
- Scans SBOMs for vulnerabilities with Grype☆85Updated this week