Alternatives and similar repositories for FortifyVulnerabilityExporter

Users that are interested in FortifyVulnerabilityExporter are comparing it to the libraries listed below

• Contrast-Security-OSS / safelog4j
  Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning …
  ☆43Updated 3 months ago
• hysnsec / awesome-sca
  A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
  ☆109Updated last year
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆110Updated last year
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆57Updated 3 months ago
• meta-fun / awesome-software-supply-chain-security
  Sharing software supply chain security open source projects
  ☆53Updated 3 years ago
• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆45Updated 5 years ago
• stevespringett / cvss-calculator
  A Java library for calculating CVSSv2, CVSSv3, and CVSSv4 scores and vectors
  ☆50Updated last month
• SDA-SE / cluster-image-scanner
  Discover vulnerabilities and container image misconfiguration in production environments.
  ☆55Updated this week
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 4 years ago
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆159Updated 2 months ago
• anchore / grype-vscode
  Grype vulnerability check plugin for Visual Studio Code
  ☆24Updated last year
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆58Updated last year
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆68Updated 6 months ago
• MaibornWolff / dd-import
  A utility to (re-)import findings and language data into DefectDojo
  ☆43Updated last year
• artis3n / course-vault-github-oidc
  Take this course to learn how to create fine-grained, least-privilege HashiCorp Vault roles for GitHub Action workflows using GitHub OIDC…
  ☆15Updated 2 weeks ago
• anunay-bhatt / secure-serverless-reference-architecture
  A walkthrough of security controls for a serverless architecture via a demo application
  ☆11Updated 3 years ago
• tenable / Security-Hub
  For use in our Tenable.IO to AWS Security Hub integration
  ☆28Updated 4 months ago
• eclipse-jbom / jbom
  ☆120Updated 8 months ago
• lightspin-tech / red-bucket-gcp
  ☆10Updated 3 years ago
• kube-tarian / tarian
  Protect your Cloud Native Applications running on Kubernetes from malicious attacks with pre-registered source code, pre-registered runti…
  ☆58Updated last year
• OtherDevOpsGene / zap-sonar-plugin
  Integrates OWASP Zed Attack Proxy reports into SonarQube
  ☆73Updated 5 months ago
• soprasteria / sonar-report
  Generates an html report from SonarQube
  ☆102Updated last year
• PaloAltoNetworks / prisma-cloud-go
  Prisma Cloud SDK in Go
  ☆18Updated 9 months ago
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆100Updated 2 weeks ago
• CycloneDX / cyclonedx-bom-repo-server
  A BOM repository server for distributing CycloneDX BOMs
  ☆85Updated 6 months ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• GoogleCloudPlatform / assured-workloads-terraform
  ☆18Updated last year
• DefectDojo / godojo
  Golang installer for DefectDojo
  ☆29Updated 11 months ago
• google / container-explorer
  ☆93Updated 2 months ago