Alternatives and similar repositories for Dependency-Check_Action

Users that are interested in Dependency-Check_Action are comparing it to the libraries listed below

• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• snyk-labs / snyk-cicd-integration-examples
  Examples of integrating the Snyk CLI into a CI/CD system
  ☆102Updated last year
• snyk-tech-services / snyk-scm-contributors-count
  Count distinct contributor of Snyk watched repos across several SCM
  ☆32Updated 3 months ago
• iacsecurity / tool-compare
  ☆285Updated 3 years ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆177Updated last year
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆234Updated last year
• marco-lancini / utils
  Useful scripts, Docker images, docker-compose apps, and Terraform modules.
  ☆151Updated last week
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆99Updated 2 weeks ago
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 9 months ago
• CloudWanderer-io / PolicyGlass
  PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicySh…
  ☆60Updated 3 years ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆151Updated 8 months ago
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆100Updated this week
• advanced-security / policy-as-code
  GitHub Advanced Security Policy as Code
  ☆91Updated last week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆347Updated 2 weeks ago
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆288Updated 2 years ago
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆251Updated 2 years ago
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆111Updated last year
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆57Updated last year
• aquia-inc / scpkit
  SCP management tool
  ☆134Updated 2 years ago
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆139Updated 3 years ago
• advanced-security / secret-scanning-custom-patterns
  Examples of Custom Secret Scanning Patterns for use with GitHub Secret Protection/Advanced Security
  ☆168Updated this week
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆549Updated 2 weeks ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆105Updated last year
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆57Updated 2 months ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆143Updated 7 months ago
• PaloAltoNetworks / prisma-cloud-scan
  GitHub action to scan container images with Palo Alto Networks' Prisma Cloud
  ☆58Updated 8 months ago
• tenchi-security / camp
  CloudSplaining on AWS Managed Policies
  ☆44Updated 3 months ago
• matthewdfuller / safer-scps
  Safer AWS SCP deployments via real-time monitoring
  ☆56Updated 2 years ago
• tuladhar / cleanup-aws-access-keys
  A cloud security tool to search and clean up unused AWS access keys, written in Go.
  ☆51Updated 3 years ago
• jonrau1 / AWS-DevSecOps-Factory
  Sample DevSecOps pipelines (heavily biased on the "Sec") for various stacks and tools using open-source security tools and AWS native ser…
  ☆73Updated 4 years ago