Alternatives and similar repositories for chalk:

Users that are interested in chalk are comparing it to the libraries listed below

• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆261Updated 3 weeks ago
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆148Updated 4 months ago
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆655Updated last month
• latiotech / LAST
  Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  ☆161Updated last year
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆71Updated last year
• gittuf / gittuf
  A security layer for Git repositories
  ☆502Updated this week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆170Updated 4 months ago
• cybrota / whispr
  A multi-vault secret injection tool for safely injecting secrets into app environment
  ☆121Updated last week
• protobom / protobom
  A universal SBOM representation in protocol buffers
  ☆280Updated last week
• Resourcely-Inc / cloud-guardrails
  Open-source best practices for protecting a secure, sensible cloud platform
  ☆124Updated 5 months ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆319Updated 2 weeks ago
• someengineering / cloud-security-list
  A list of cloud security tools and vendors.
  ☆155Updated 6 months ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆425Updated 6 months ago
• mindersec / minder
  Software Supply Chain Security Platform
  ☆325Updated this week
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆431Updated this week
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆227Updated 7 months ago
• xeol-io / xeol
  A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
  ☆382Updated this week
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆249Updated 2 years ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious PyPI and npm packages
  ☆130Updated this week
• WithSecureLabs / IAMSpy
  ☆217Updated 3 months ago
• edera-dev / am-i-isolated
  Validate the isolation posture of your container environment.
  ☆256Updated last week
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆286Updated last year
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆273Updated 6 months ago
• turbot / powerpipe
  Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build …
  ☆367Updated this week
• common-fate / glide
  Automate permissions to your cloud and critical applications.
  ☆239Updated last year
• vendorsec / mvsp
  Minimum Viable Secure Product mvsp.dev
  ☆191Updated 3 months ago
• mchmarny / s3cme
  Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…
  ☆104Updated 11 months ago
• chainloop-dev / chainloop
  Evidence store for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
  ☆394Updated this week
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆87Updated 7 months ago
• turbot / tailpipe
  select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, r…
  ☆391Updated this week