crashappsec / chalkLinks
Chalk allows you to follow code from development, through builds and into production.
☆415Updated this week
Alternatives and similar repositories for chalk
Users that are interested in chalk are comparing it to the libraries listed below
Sorting:
- CI/CD Security Analyzer☆729Updated 11 months ago
- A multi-vault secret injection tool for safely injecting secrets into app environment☆132Updated last month
- A list of cloud security tools and vendors.☆184Updated last year
- A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs☆429Updated last week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆514Updated last week
- boostsecurityio/poutine☆361Updated last week
- Documenting your Threat Models with HCL☆453Updated last month
- select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, r…☆534Updated last month
- Open-source best practices for protecting a secure, sensible cloud platform☆129Updated last year
- Validate the isolation posture of your container environment.☆311Updated last month
- RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…☆159Updated last year
- A Software as a Service (SaaS) log collection framework.☆182Updated 3 weeks ago
- A security layer for Git repositories☆571Updated last week
- Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build …☆474Updated this week
- A universal SBOM representation in protocol buffers☆315Updated last week
- YouShallNotPass brings an added level of execution security to mission-critical CI/CD Systems.☆37Updated 2 years ago
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆172Updated last year
- Software Supply Chain Security Platform☆373Updated last week
- A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalo…☆384Updated last year
- ☆76Updated 3 months ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆114Updated this week
- Lambda function that streamlines containment of an AWS account compromise☆344Updated 2 years ago
- SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more☆522Updated this week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆829Updated 10 months ago
- Flowpipe is a cloud scripting engine. Automation and workflow to connect your clouds to the people, systems and data that matters.☆453Updated last week
- kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …☆125Updated 4 months ago
- A tool to check the security settings of Github Organizations.☆75Updated 2 years ago
- Gram is Klarna's own threat model diagramming tool☆328Updated 2 weeks ago
- The security workflow engine!☆136Updated 2 months ago