Scans SBOMs for vulnerabilities with Grype
☆87Oct 27, 2026Updated this week
Alternatives and similar repositories for vulnerability-operator
Users that are interested in vulnerability-operator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vulnerability Scanner Suite based on grype and syft from anchore☆54May 5, 2022Updated 4 years ago
- Catalogue all images of a Kubernetes cluster to multiple targets with Syft☆239Updated this week
- Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners☆14Updated this week
- An query language and interactive tooling to work with SBOM data.☆15Oct 7, 2024Updated 2 years ago
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆23Mar 13, 2023Updated 3 years ago
- Example repository that demonstrates a supply chain security workflow using Syft, Grype, Cosign☆12Sep 15, 2021Updated 5 years ago
- Minting OIDC tokens from GitHub Actions for use with OpenFaaS☆14Apr 8, 2025Updated last year
- ☆70Updated this week
- Easily run Conftest, pull remote policies, surface the results, and obtain test metrics☆13Oct 2, 2025Updated last year
- Creates PolicyReports based on the different Trivy Operator CRDs like VulnerabilityReports☆68Oct 14, 2026Updated 2 weeks ago
- Kubernetes Admission Controller for Image Scanning using OPA☆50Sep 18, 2023Updated 3 years ago
- Go tool to declaratively bump dependencies.☆13Jul 9, 2026Updated 3 months ago
- A utility to generate SPDX-compliant Bill of Materials manifests☆475Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev☆10May 19, 2025Updated last year
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆312Updated this week
- A Kubernetes CSI plugin to automatically mount SPIFFE certificates to Pods using ephemeral volumes☆90Updated this week
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆24Oct 20, 2026Updated last week
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,572Updated this week
- sbomasm: The Complete SBOM Management Toolkit☆133Updated this week
- A tool to manage temporary Kubernetes network access via a web UI and a controller.☆16Aug 30, 2025Updated last year
- vexctl is a tool to attest VEX impact statements☆45Mar 27, 2023Updated 3 years ago
- Bootc in Kubernetes, tool for creating bootc kuberntes clusters☆19Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A tool to create, transform and attest VEX metadata☆220Updated this week
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Apr 17, 2023Updated 3 years ago
- GitHub Action for creating software bill of materials using Syft.☆265Oct 23, 2026Updated last week
- Store and access your secrets the Kubernetes native way with any external KMS.☆182Sep 15, 2023Updated 3 years ago
- Supply Chain Integrity Model☆112Jun 12, 2023Updated 3 years ago
- OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure☆1,458May 25, 2026Updated 5 months ago
- Vulnerability scanning just got lazier☆328Oct 21, 2026Updated last week
- A standard API specification for exchanging supply chain artifacts and intelligence☆121Oct 21, 2026Updated last week
- Manages client side git hooks resulting in the ability to create git action pipelines.☆78Jul 5, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- go library for processing container images and simulating a squash filesystem☆115Updated this week
- Colorize piped Prometheus metrics in the terminal☆29Jan 1, 2024Updated 2 years ago
- tutorials made for @cryptoparty & other security/teaching stuff☆12Jan 17, 2016Updated 10 years ago
- A collection of tools to improve your containerized apps security posture☆152May 26, 2024Updated 2 years ago
- ☆18Jan 11, 2022Updated 4 years ago
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆74Updated this week
- A simple, powerful, and extensible Go logging framework suitable for stylized command line utilities and multi-writer logging☆23Aug 13, 2024Updated 2 years ago