Alternatives and similar repositories for scharf

Users that are interested in scharf are comparing it to the libraries listed below

• hashicorp-forge / grove
  A Software as a Service (SaaS) log collection framework.
  ☆182Updated 3 weeks ago
• telophasehq / go-ocsf
  ☆76Updated 3 months ago
• nscuro / dtapac
  Audit Dependency-Track findings and policy violations via policy as code
  ☆40Updated this week
• Vulnetix / python-ssvc
  Python implementation of Stakeholder-Specific Vulnerability Categorization (SSVC)
  ☆23Updated 3 weeks ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆114Updated this week
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated 2 years ago
• makalin / SecureMCP
  SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…
  ☆137Updated 8 months ago
• Betterment / claws
  💅🏽 analyzes your github actions
  ☆97Updated last month
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆453Updated this week
• DataDog / supply-chain-firewall
  Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages
  ☆215Updated this week
• IBM / CBOM
  Cryptography Bill of Materials
  ☆97Updated 4 months ago
• CycloneDX / sbom-utility
  Utility that provides an API platform for validating, querying and managing BOM data
  ☆125Updated last month
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆98Updated 2 weeks ago
• smithy-security / smithy
  The security workflow engine!
  ☆136Updated 2 months ago
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆215Updated this week
• sbomify / sbomify
  sbomify is a product security artifact hub and a trust center.
  ☆45Updated last week
• relizaio / rearm
  The Evidence Store for Your Entire Supply Chain. SBOMs, xBOMs and every other artifact - stored for 10+ years, versioned and audit-ready.
  ☆89Updated this week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆179Updated 2 months ago
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆78Updated 11 months ago
• DataDog / attache
  Attaché provides an emulation layer for Cloud Provider IMDS APIs
  ☆60Updated this week
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆75Updated this week
• bomctl / bomctl
  Format agnostic SBOM tooling
  ☆131Updated 2 months ago
• communitysec / sbom-hall-of-fame
  A place for the InfoSec community to share and celebrate real stories of organizations successfully using SBOMs (and other bills of mater…
  ☆43Updated 2 years ago
• anchore / vunnel
  Tool for collecting vulnerability data from various sources (used to build the grype database)
  ☆110Updated this week
• rotemreiss / MalifiScan
  A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…
  ☆70Updated 2 months ago
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆89Updated last year
• SAP / cloud-active-defense
  Add a layer of active defense to your cloud applications.
  ☆103Updated this week
• vulncheck-oss / cli
  VulnCheck's official command line tool
  ☆150Updated this week
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆226Updated last year
• SygniaLabs / Mirage
  ☆75Updated 10 months ago