Alternatives and similar repositories for release-data:

Users that are interested in release-data are comparing it to the libraries listed below

• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆265Updated this week
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆239Updated 2 weeks ago
• github / cleanowners
  A GitHub Action to suggest removal of non-organization members from CODEOWNERS files
  ☆120Updated this week
• redhat-plumbers-in-action / differential-shellcheck
  🐚 GitHub Action for running ShellCheck differentially
  ☆57Updated this week
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆151Updated last week
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆147Updated this week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆175Updated 3 months ago
• GitHubSecurityLab / actions-permissions
  GitHub token permissions Monitor and Advisor actions
  ☆262Updated 3 weeks ago
• github-community-projects / private-mirrors
  A GitHub App that allows you to contribute upstream using private mirrors of public projects
  ☆152Updated this week
• octo-sts / action
  ☆31Updated 2 months ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated 11 months ago
• cloudflare / har-sanitizer
  ☆205Updated 3 months ago
• ossf / scorecard-action
  Official GitHub Action for OpenSSF Scorecard.
  ☆276Updated this week
• actions / publish-immutable-action
  A GitHub Action used for publishing an Action to ghcr.io as an OCI container.
  ☆53Updated 2 months ago
• jetstack / paranoia
  Inspect certificate authorities in container images
  ☆229Updated 8 months ago
• devcontainers-contrib / nanolayer
  ☆46Updated 5 months ago
• stacklok / frizbee
  Throw a tag at it and it comes back with a checksum.
  ☆99Updated this week
• github / contributors
  GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.
  ☆109Updated this week
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆119Updated this week
• chainguard-dev / actions
  A collection of reusable Github Actions workflows.
  ☆122Updated last week
• github / evergreen
  GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…
  ☆189Updated this week
• step-security / harden-runner
  Harden-Runner secures CI/CD workflows by controlling network access and monitoring activities on GitHub-hosted and self-hosted runners
  ☆649Updated this week
• bomctl / bomctl
  Format agnostic SBOM tooling
  ☆94Updated this week
• arnica-ext / GitGoat
  GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…
  ☆169Updated this week
• dougcalobrisi / nested-github-runners-action
  GitHub Action to run multiple self-hosted runners in a hosted GitHub Runner
  ☆127Updated 2 years ago
• suzuki-shunsuke / tfprovidercheck
  CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…
  ☆78Updated this week
• chainguard-dev / darkfiles
  Darkfiles finds orphaned files in container images and makes them to bad deeds
  ☆41Updated last year
• spdx / spdx-to-osv
  Produce an Open Source Vulnerability JSON file based on information in an SPDX document
  ☆62Updated 7 months ago
• xeol-io / xeol
  A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
  ☆361Updated this week
• anchore / yardstick
  Compare vulnerability scanners results (to make them better!)
  ☆16Updated this week