Alternatives and similar repositories for common-cloud-controls

Users that are interested in common-cloud-controls are comparing it to the libraries listed below

• oscal-compass / compliance-trestle
  An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
  ☆223Updated last week
• ossf / security-baseline
  ☆132Updated last week
• ossf / ai-ml-security
  Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
  ☆128Updated last week
• awslabs / security-hub-compliance-analyzer
  A compliance analysis tool which enables organizations to more quickly articulate their compliance posture and also generate supporting e…
  ☆52Updated 2 months ago
• OWASP / www-project-ai-maturity-assessment
  OWASP Foundation web repository
  ☆38Updated 2 months ago
• microsoft / oss-ssc-framework
  Open Source Software Secure Supply Chain Framework
  ☆238Updated 3 years ago
• cloud-native-security-controls / controls-catalog
  ☆16Updated last year
• oscal-club / awesome-oscal
  A list of tools, blog posts, and other resources that further the use and adoption of OSCAL standards.
  ☆197Updated 6 months ago
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆59Updated 2 years ago
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆57Updated 2 months ago
• EasyDynamics / oscal-editor-deployment
  Various deployments of the OSCAL editor
  ☆47Updated last year
• ossf / s2c2f
  The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…
  ☆222Updated 7 months ago
• aibom-squad / SBOM-for-AI-Use-Cases
  Repository for on-going work as part of the SBOM for AI Tiger Team effort.
  ☆40Updated 5 months ago
• defenseunicorns-labs / lula1
  The Compliance Validator
  ☆184Updated last month
• PaloAltoNetworks / prisma-cloud-scan
  GitHub action to scan container images with Palo Alto Networks' Prisma Cloud
  ☆58Updated last week
• prowler-cloud / py-ocsf-models
  OCSF (https://schema.ocsf.io/) models in Python using Pydantic.
  ☆30Updated 3 weeks ago
• trustoncloud / threatmodel-for-azure-storage
  Threat model for Azure Storage - Library of all the attack scenarios on Azure Storage, and how to mitigate them following a risk-based ap…
  ☆59Updated 2 years ago
• advanced-security / enterprise-security-team
  Manage a uniform team of security managers for every organization in your enterprise
  ☆25Updated this week
• usnistgov / oscal-cli
  A simple open source command line tool to support common operations over OSCAL content.
  ☆57Updated last week
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆91Updated 2 months ago
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆95Updated last week
• someengineering / cloud-security-list
  A list of cloud security tools and vendors.
  ☆180Updated last year
• GSA / fedramp-automation
  FedRAMP Automation
  ☆348Updated 8 months ago
• chainguard-dev / ghscan
  Scan GitHub Actions Workflow logs for IOCs
  ☆16Updated last week
• awslabs / threat-designer
  Threat Designer is a GenerativeAI application designed to automate and streamline the threat modeling process for secure system design.
  ☆175Updated 3 weeks ago
• Ask-Sage / NIST-800-53-Automation
  This python app generates NIST 800 53 control implementation for each control and generate the CSV file.
  ☆53Updated 2 years ago
• OWASP / OpenCRE
  ☆131Updated last week
• chughes757 / Federal-DoD-Software-Factory-Compliance
  This repository is a collection of resources to help facilitate compliance innovation utilizing Cloud, DevSecOps and Software Factory tec…
  ☆76Updated 2 years ago
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆235Updated last year
• caizencloud / caizen
  Harness the security superpowers of your cloud asset inventory
  ☆11Updated last year