Alternatives and similar repositories for cdk-threagile

Users that are interested in cdk-threagile are comparing it to the libraries listed below

• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆236Updated last year
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆251Updated 2 years ago
• rallyhealth / conftest-policy-packs
  Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.
  ☆60Updated 2 years ago
• controlplaneio / badrobot
  BadRobot - Operator Security Audit Tool
  ☆223Updated 3 weeks ago
• aquasecurity / appshield
  Security configuration checks for popular cloud native applications and infrastructure.
  ☆119Updated 3 years ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆177Updated last month
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆211Updated 3 weeks ago
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆287Updated 2 years ago
• hysnsec / awesome-policy-as-code
  A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
  ☆203Updated 2 years ago
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆60Updated 2 years ago
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆170Updated this week
• ckotzbauer / vulnerability-operator
  Scans SBOMs for vulnerabilities with Grype
  ☆85Updated last week
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆75Updated 2 years ago
• ckotzbauer / sbom-operator
  Catalogue all images of a Kubernetes cluster to multiple targets with Syft
  ☆214Updated last week
• interlynk-io / sbomqs
  sbomqs: The Comprehensive SBOM Quality & Compliance Tool
  ☆261Updated this week
• RichardoC / kube-audit-rest
  Kubernetes audit logging, when you don't control the control plane
  ☆90Updated this week
• buildsec / frsca
  ☆253Updated 2 weeks ago
• mondoohq / cnspec
  An open source, cloud-native security to protect everything from build to runtime
  ☆393Updated last week
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆58Updated last year
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆454Updated 2 weeks ago
• MaibornWolff / dd-import
  A utility to (re-)import findings and language data into DefectDojo
  ☆43Updated last year
• chainguard-dev / digestabot
  A Github Action to automatically update digests for container images.
  ☆84Updated last week
• chainguard-dev / ssc-reading-list
  A reading list for software supply-chain security.
  ☆366Updated 3 years ago
• anderseknert / pre-commit-opa
  Pre-commit git hooks for Open Policy Agent (OPA) and Rego development
  ☆67Updated 6 months ago
• smithy-security / smithy
  The security workflow engine!
  ☆136Updated last month
• in-toto / archivista
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…
  ☆103Updated this week
• policy-hub / policy-hub-cli
  CLI for searching Rego policies
  ☆106Updated 3 years ago
• lightspin-tech / eks-creation-engine
  The Amazon Elastic Kubernetes Service (EKS) Creation Engine (ECE) is a Python command-line program created by the Lightspin Office of the…
  ☆41Updated 3 years ago
• banzaicloud / dast-operator
  Dynamic Application and API Security Testing
  ☆193Updated 2 years ago
• knative-extensions / security-guard
  Runtime security plug to protect user containers
  ☆66Updated 3 weeks ago