GitHub App to set and enforce security policies
☆1,461Oct 21, 2026Updated last week
Alternatives and similar repositories for allstar
Users that are interested in allstar are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OpenSSF Scorecard - Security health metrics for Open Source☆5,796Updated this week
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,572Updated this week
- Supply-chain Levels for Software Artifacts☆1,951Oct 22, 2026Updated last week
- Code signing and transparency for containers and binaries☆6,397Updated this week
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆892Aug 31, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Software Supply Chain Transparency Log☆1,230Updated this week
- A tool to check the security settings of Github Organizations.☆77Feb 9, 2026Updated 8 months ago
- Language-agnostic SLSA provenance generation for Github Actions☆607Aug 7, 2026Updated 2 months ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆131Oct 22, 2026Updated last week
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆9,792Updated this week
- Keyless Git signing using Sigstore☆1,134Updated this week
- in-toto is a framework to protect supply chain integrity.☆1,052Aug 27, 2026Updated 2 months ago
- Tfsec is now part of Trivy☆7,059Mar 25, 2026Updated 7 months ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆614Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A security layer for Git repositories☆673Updated this week
- Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source pa…☆9,117Updated this week
- all paths lead to clouds☆640Oct 11, 2023Updated 3 years ago
- A universal SBOM representation in protocol buffers☆338Updated this week
- A vulnerability scanner for container images and filesystems☆13,140Updated this week
- Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security…☆11,830Updated this week
- Open Source Package Analysis☆921Oct 21, 2026Updated last week
- Official GitHub Action for OpenSSF Scorecard.☆426Updated this week
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,726Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …☆209Sep 12, 2026Updated last month
- A tool for securing CI/CD workflows with version pinning.☆970Jul 18, 2026Updated 3 months ago
- Open source compliance tool for development platforms.☆286Oct 30, 2023Updated 2 years ago
- Helping allocate resources to secure the critical open source projects we all depend on.☆413Sep 2, 2026Updated last month
- Write tests against structured configuration data using the Open Policy Agent Rego query language☆3,293Updated this week
- Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database.☆4,161Updated this week
- Sigstore OIDC PKI☆892Updated this week
- Go security checker☆8,991Updated this week
- Machine-readable specification for the attestation of security-relevant data.☆82Oct 21, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Security risk analysis for Kubernetes resources☆1,489Oct 8, 2026Updated 3 weeks ago
- Documenting your Threat Models with HCL☆470Updated this week
- Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes se…☆964Sep 3, 2024Updated 2 years ago
- Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.☆5,214Nov 20, 2025Updated 11 months ago
- A CLI tool for creating secure by design/default source repos.☆28Jul 29, 2024Updated 2 years ago
- A static analysis tool for securing Go code☆2,157Jan 23, 2024Updated 2 years ago
- This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that auto…☆15,128Updated this week