A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
☆116Nov 26, 2024Updated last year
Alternatives and similar repositories for awesome-sca
Users that are interested in awesome-sca are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.☆211Dec 6, 2023Updated 2 years ago
- A comprehensive list of software composition analysis tools.☆173Aug 26, 2026Updated 2 months ago
- Redis Security Map - Anti-hacking for Redis☆31Mar 11, 2022Updated 4 years ago
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,832Aug 2, 2024Updated 2 years ago
- This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites☆26May 14, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Fork Threat Modeling Platform - Community☆30Oct 1, 2026Updated last month
- Open-source threat modeling tool with a modern canvas, git-friendly YAML files, and AI-assisted STRIDE analysis — the alternative to Micr…☆17Oct 22, 2026Updated last week
- threatspec - continuous threat modeling, through code☆390Dec 30, 2020Updated 5 years ago
- A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles☆602May 27, 2026Updated 5 months ago
- This repository stores content that can be used to design a Rapid Threat Model Prototyping process for a software development group.☆163Mar 14, 2023Updated 3 years ago
- Dotnet Source and Assembly Inspector (Dosai) is a tool to list details about the namespaces and methods from sources and assemblies.☆14Updated this week
- Using AWS for GitHub Actions and various security features available through AWS Container Services like Amazon ECS, AWS Fargate, and Ama…☆17Mar 15, 2021Updated 5 years ago
- Tool to automate takeover of DigitalOcean Kubernetes cluster. Check out the blog post for more info.☆17Dec 20, 2018Updated 7 years ago
- A repo for testing and demonstration purposes.☆32Feb 10, 2026Updated 8 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Modular attestation monorepo for cilock — 30+ attestors, 9 signers, the rookery builder for custom binaries. The source of the cilock CLI…☆10Oct 22, 2026Updated last week
- A curated list for Awesome Kubernetes Security resources☆2,008Jul 31, 2026Updated 3 months ago
- OPA Gatekeeper vs Kyverno☆67Oct 27, 2021Updated 5 years ago
- ☆432Jan 18, 2023Updated 3 years ago
- A curated list of Falco related tools, frameworks, blogs, podcasts, and articles☆201Jul 28, 2021Updated 5 years ago
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆1,155Oct 22, 2026Updated last week
- Demand-Driven Pointer Analysis☆15Updated this week
- A deliberately vulnerable js app made with reactjs. For educational purposes.☆17Mar 20, 2019Updated 7 years ago
- ☆16Jun 21, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, wor…☆488Dec 13, 2021Updated 4 years ago
- 📚 A curated list of awesome Docker security resources☆725Feb 28, 2026Updated 8 months ago
- ☆26Oct 13, 2026Updated 3 weeks ago
- ☆20Dec 19, 2025Updated 10 months ago
- Enable Falco to read audit logs from EKS☆11Dec 13, 2020Updated 5 years ago
- A fuzzer for SMT solvers☆23May 8, 2026Updated 5 months ago
- ☆11Oct 20, 2020Updated 6 years ago
- Automatically tag Terraform & CloudFormation resources with Git commit SHA, branch, and repo. Zero-config wrapper for instant infrastruct…☆29Feb 27, 2026Updated 8 months ago
- ☆17Jan 3, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Перевод BSIMM (https://www.bsimm.com) на русский язык☆23Dec 2, 2022Updated 3 years ago
- A gitbook for doing a null Bangalore session on linux container security to discuss and teach namespaces, cgroups etc.☆21Apr 27, 2017Updated 9 years ago
- An ACME HTTP01 solver for the Knative Certificate CRD.☆16May 17, 2024Updated 2 years ago
- The setup instructions and exercises for the workshop.☆15Mar 5, 2019Updated 7 years ago
- Links and resources for the O'Reilly Kubernetes Security book☆99Jan 22, 2021Updated 5 years ago
- A Pythonic framework for threat modeling☆1,188Updated this week
- ReadyAPI Plugin Development Kit☆10Jun 25, 2026Updated 4 months ago