cycodehq / cycode-cli
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning
☆87Updated last month
Alternatives and similar repositories for cycode-cli:
Users that are interested in cycode-cli are comparing it to the libraries listed below
- Runtime Security Solution for your CI/CD Pipeline☆93Updated 4 months ago
- Enrich SBOMs with data from third party services☆151Updated last week
- Tool to achieve policy driven vetting of open source dependencies☆247Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆224Updated 5 months ago
- Publishes BOMs to Dependency-Track from GitHub Actions☆48Updated 3 months ago
- SBOM quality score - Quality metrics for your sboms☆192Updated this week
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆170Updated last month
- boostsecurityio/poutine☆243Updated last week
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆83Updated this week
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆130Updated 11 months ago
- Github action to run dependency check☆72Updated 5 months ago
- Utility that provides an API platform for validating, querying and managing BOM data☆98Updated 2 months ago
- OWASP Dependency Track API client for intergration into CI/CD pipeline☆51Updated 5 months ago
- CI/CD Security Analyzer☆642Updated 2 months ago
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆169Updated this week
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆61Updated last year
- A tool for preventing the installation of malicious PyPI and npm packages☆108Updated last month
- A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs☆52Updated last year
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆62Updated 7 months ago
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆103Updated 8 months ago
- Evaluate source control (GitHub) security posture☆249Updated last year
- find dangling domains in a multi cloud environment☆136Updated last week
- A comprehensive list of software composition analysis tools.☆135Updated 7 months ago
- OpenVEX Specification☆139Updated 6 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆67Updated last month
- Discover vulnerabilities and container image misconfiguration in production environments.☆54Updated this week
- Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents☆19Updated this week
- Documenting your Threat Models with HCL☆412Updated 4 months ago
- Gram is Klarna's own threat model diagramming tool☆291Updated this week
- The security workflow engine!☆92Updated this week