Alternatives and similar repositories for chalk:

Users that are interested in chalk are comparing it to the libraries listed below

• protobom / protobom
  A universal SBOM representation in protocol buffers
  ☆273Updated this week
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆249Updated last year
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆243Updated last week
• secengjeff / awskillswitch
  Lambda function that streamlines containment of an AWS account compromise
  ☆317Updated last year
• latiotech / LAST
  Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  ☆154Updated 10 months ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆170Updated last month
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆412Updated 4 months ago
• turbot / powerpipe
  Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build …
  ☆322Updated this week
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆70Updated last year
• Permiso-io-tools / CloudGrappler
  ☆254Updated last month
• hashicorp-forge / grove
  A Software as a Service (SaaS) log collection framework.
  ☆147Updated last month
• brexhq / substation
  Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
  ☆334Updated this week
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆789Updated 2 weeks ago
• gittuf / gittuf
  A security layer for Git repositories
  ☆473Updated this week
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆144Updated last month
• someengineering / cloud-security-list
  A list of cloud security tools and vendors.
  ☆141Updated 4 months ago
• owasp-dep-scan / blint
  BLint is a Binary Linter to check the security properties, and capabilities in your executables. Since v2, blint is also an SBOM generato…
  ☆354Updated 3 weeks ago
• edera-dev / am-i-isolated
  Validate the isolation posture of your container environment.
  ☆227Updated this week
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆423Updated this week
• microsoft / oss-ssc-framework
  Open Source Software Secure Supply Chain Framework
  ☆234Updated 2 years ago
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆642Updated 2 months ago
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆141Updated 7 months ago
• cybrota / whispr
  A multi-vault secret injection tool for safely injecting secrets into app environment
  ☆106Updated this week
• chainguard-dev / malcontent
  #supply #chain #attack #detection
  ☆492Updated this week
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆224Updated 5 months ago
• Resourcely-Inc / cloud-guardrails
  Open-source best practices for protecting a secure, sensible cloud platform
  ☆116Updated 2 months ago
• common-fate / glide
  Automate permissions to your cloud and critical applications.
  ☆238Updated 10 months ago
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆536Updated last week
• arnica-ext / GitGoat
  GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…
  ☆169Updated this week
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆86Updated 5 months ago