Alternatives and similar repositories for production-readiness-checklist:

Users that are interested in production-readiness-checklist are comparing it to the libraries listed below

• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 7 months ago
• elementsinteractive / twyn
  Security tool against dependency typosquatting attacks
  ☆39Updated last week
• opengrep / opengrep-rules
  ☆60Updated 2 months ago
• snyk-labs / github-actions-scanner
  Scans your Github Actions for security issues
  ☆62Updated last month
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious PyPI and npm packages
  ☆130Updated this week
• xvnpw / ai-threat-modeling-action
  AI featured threat modeling and security review action
  ☆43Updated 4 months ago
• Resourcely-Inc / cloud-guardrails
  Open-source best practices for protecting a secure, sensible cloud platform
  ☆124Updated 5 months ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆71Updated last year
• mario-platt / ASVS-Agile-Delivery-Guide
  ☆35Updated 3 years ago
• tldrsec / awesome-secure-defaults
  Awesome secure by default libraries to help you eliminate bug classes!
  ☆687Updated 3 weeks ago
• Whitespots-OU / security-requirements-generator
  A small tool to help developers understand a huge set of security requirements from appsec teams
  ☆45Updated 2 years ago
• AppSecure-nrw / security-belts
  ☆106Updated 8 months ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated last year
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆107Updated last year
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆82Updated 2 months ago
• jeremylong / malicious-dependencies
  Demonstrates how a malicious dependency could negatively impact the build output.
  ☆25Updated last year
• WTFender / cf-lambda-public-url-prohibited
  Detect publicly accessible Lambda Function URLs in your AWS account
  ☆9Updated 2 years ago
• orcasecurity-research / kte
  Test & Compare different Kubernetes security offerings on EKS, GKE and AKS
  ☆39Updated 7 months ago
• mllamazares / vulncov
  🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.
  ☆39Updated 3 months ago
• MaibornWolff / dd-import
  A utility to (re-)import findings and language data into DefectDojo
  ☆42Updated 6 months ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆93Updated 10 months ago
• Checkmarx / 2ms
  Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git
  ☆90Updated this week
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆145Updated 9 months ago
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆58Updated last year
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 3 weeks ago
• Santandersecurityresearch / DrHeader
  drHEADer helps with the audit of security headers received in response to a single request or a list of requests.
  ☆110Updated 2 months ago
• Toreon / threat-model-playbook
  ☆86Updated 3 years ago
• adamshostack / DFD3
  ☆76Updated 5 months ago
• OWASP / threat-modeling-playbook
  ☆33Updated 3 years ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆170Updated 4 months ago