Alternatives and similar repositories for shiftleft-iac-action

Users that are interested in shiftleft-iac-action are comparing it to the libraries listed below

• DataDog / supply-chain-firewall
  Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages
  ☆210Updated this week
• Hacking-the-Cloud / htc-ctfs
  Holds the public Hacking the Cloud CTFs.
  ☆63Updated last year
• orcasecurity-research / kte
  Test & Compare different Kubernetes security offerings on EKS, GKE and AKS
  ☆40Updated last year
• GitGuardian / ggcanary
  GitGuardian Canary Tokens
  ☆145Updated 6 months ago
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆89Updated last year
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆146Updated last year
• cado-security / cloudgrep
  cloudgrep is grep for cloud storage
  ☆327Updated 10 months ago
• zmallen / cloudtrail2sightings
  Convert cloudtrail data to MITRE ATT&CK Sightings
  ☆82Updated 3 years ago
• kpolley / slackurity
  Slack bot which promotes Defense in Depth/Zero Trust security practices
  ☆24Updated 2 years ago
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆78Updated 10 months ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆76Updated 4 months ago
• adanalvarez / TrailDiscover
  An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and secur…
  ☆173Updated last month
• Permiso-io-tools / LogLicker
  Tool for obfuscating and deobfuscating data.
  ☆75Updated last year
• semgr8ns / semgr8s
  Semgrep-based Policy Controller for Kubernetes
  ☆47Updated 9 months ago
• tenable / EscalateGPT
  An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.
  ☆117Updated this week
• DataDog / workload-security-evaluator
  ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…
  ☆37Updated last year
• xvnpw / ai-threat-modeling-action
  AI featured threat modeling and security review action
  ☆45Updated last year
• marco-lancini / utils
  Useful scripts, Docker images, docker-compose apps, and Terraform modules.
  ☆149Updated last week
• orcasecurity / orca-toolbox
  ☆124Updated 7 months ago
• aquia-inc / aws-guardduty-runbook-generator
  Generates runbooks for GuardDuty findings
  ☆39Updated last year
• adanalvarez / HoneyTrail
  Independently deploy customized honeyservices in AWS to trigger alerts on unauthorized access. It utilizes a dedicated CloudTrail for pre…
  ☆51Updated last year
• SeisoLLC / easy_infra
  A docker container to simplify and secure the use of Infrastructure as Code (IaC)
  ☆78Updated this week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆354Updated this week
• shellcromancer / audit-log-wall-of-shame
  Audit log wall of shame.
  ☆41Updated 4 months ago
• CloudDefenseAI / AWSZeroTrustPolicy
  Adaptive AWS Zero Trust Policy made easy: Auto-generate least-privilege policies based on user activity in real time! Accelerate the adop…
  ☆76Updated last year
• PaloAltoNetworks / cobra-tool
  Cloud Offensive Breach and Risk Assessment (COBRA) Tool
  ☆102Updated 7 months ago
• PaloAltoNetworks / github-oidc-utils
  ☆37Updated 8 months ago
• offensive-actions / terraform-provider-statefile-rce
  This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.
  ☆59Updated 11 months ago
• Permiso-io-tools / CloudConsoleCartographer
  Released at Black Hat Asia on April 18, 2024, Cloud Console Cartographer is a framework for condensing groupings of cloud events (e.g. Cl…
  ☆174Updated last year
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆95Updated 5 months ago