controlplaneio / collieLinks
OSCAL and Kyverno Policy Demo for AWS
☆15Updated 2 years ago
Alternatives and similar repositories for collie
Users that are interested in collie are comparing it to the libraries listed below
Sorting:
- The Compliance Validator☆184Updated last month
- ☆16Updated last year
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆511Updated last week
- BigBang the product☆194Updated this week
- Response Engine for managing threats in your Kubernetes☆186Updated last month
- Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.☆19Updated last week
- ☆253Updated last week
- Gatecheck CI/CD Validation Tool☆15Updated 4 months ago
- A utility to generate SPDX-compliant Bill of Materials manifests☆429Updated 2 weeks ago
- ☆11Updated 3 years ago
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆103Updated last week
- A static code analyzer to generate network connection topology for micro-service applications☆18Updated 3 weeks ago
- BadRobot - Operator Security Audit Tool☆223Updated last week
- (D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.☆95Updated 3 months ago
- Scan GitHub Actions Workflow logs for IOCs☆16Updated last week
- Inspect certificate authorities in container images☆240Updated 3 weeks ago
- ☆23Updated 4 years ago
- KBOM - Kubernetes Bill of Materials☆323Updated 5 months ago
- kubectl plugin for signing Kubernetes manifest YAML files with sigstore☆85Updated 2 weeks ago
- A tool to create, transform and attest VEX metadata☆169Updated last week
- Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.☆78Updated 2 years ago
- ☆42Updated this week
- This repository contains the container image scanning tool ORCA☆42Updated 3 months ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆111Updated 11 months ago
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆95Updated last week
- Regal is a linter and language server for Rego, bringing your policy development experience to the next level!☆354Updated last week
- sigstore the hard way!☆116Updated 4 months ago
- Process documentation, non-code deliverables, and miscellaneous artifacts of Kubernetes SIG Security☆231Updated 2 months ago
- Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads.☆450Updated last month