hupe1980 / cdk-threagileLinks
Agile Threat Modeling as Code
☆13Updated 3 years ago
Alternatives and similar repositories for cdk-threagile
Users that are interested in cdk-threagile are comparing it to the libraries listed below
Sorting:
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆59Updated 2 years ago
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- Generate a score for your sbom to understand if it will actually be useful.☆234Updated last year
- A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.☆197Updated last year
- Github action to run dependency check☆84Updated 4 months ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆177Updated 10 months ago
- Publishes BOMs to Dependency-Track from GitHub Actions☆55Updated last year
- Useful scripts, Docker images, docker-compose apps, and Terraform modules.☆151Updated 2 weeks ago
- Enrich SBOMs with data from third party services☆196Updated last month
- SCP management tool☆134Updated last year
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago
- The Amazon Elastic Kubernetes Service (EKS) Creation Engine (ECE) is a Python command-line program created by the Lightspin Office of the…☆41Updated 2 years ago
- Pre-commit git hooks for Open Policy Agent (OPA) and Rego development☆67Updated 3 months ago
- Documenting your Threat Models with HCL☆433Updated this week
- sbomqs: The Comprehensive SBOM Quality & Compliance Tool☆246Updated last week
- OWASP Foundation Web Respository☆56Updated 2 weeks ago
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆52Updated last week
- Scans SBOMs for vulnerabilities with Grype☆85Updated this week
- BadRobot - Operator Security Audit Tool☆223Updated this week
- ☆122Updated 4 months ago
- A tool to check the security settings of Github Organizations.☆72Updated 2 years ago
- A tool to create, transform and attest VEX metadata☆160Updated last week
- CLI for searching Rego policies☆106Updated 3 years ago
- ☆285Updated 2 years ago
- All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.☆366Updated 2 months ago
- ☆250Updated last week
- A Github Action to automatically update digests for container images.☆74Updated last week
- Catalogue all images of a Kubernetes cluster to multiple targets with Syft☆208Updated last week
- Securing Alice's, Bob's and Carl's software supply chain using in-toto☆98Updated 2 weeks ago
- Open source compliance tool for development platforms.☆288Updated last year