πOpen Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
β1,370Oct 15, 2026Updated this week
Alternatives and similar repositories for best-practices-badge
Users that are interested in best-practices-badge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- πAutomated review of open source software projectsβ123Dec 6, 2024Updated last year
- OpenSSF Scorecard - Security health metrics for Open Sourceβ5,764Updated this week
- Machine-readable specification for the attestation of security-relevant data.β81Oct 8, 2026Updated last week
- The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for opeβ¦β1,080Oct 5, 2026Updated last week
- Curated list of awesome tools for managing open source programsβ505Sep 7, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ShellCheck, a static analysis tool for shell scriptsβ40,187Updated this week
- Vulnerability Static Analysis for Containersβ11,077Updated this week
- OSS-Fuzz - continuous fuzzing for open source software.β12,750Updated this week
- Supply-chain Levels for Software Artifactsβ1,944Oct 6, 2026Updated last week
- The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in productioβ¦β9,706Jun 4, 2026Updated 4 months ago
- Notary is a project that allows anyone to have trust over arbitrary collections of dataβ3,290Aug 7, 2024Updated 2 years ago
- Sonobuoy is a diagnostic tool that makes it easier to understand the state of a Kubernetes cluster by running a set of Kubernetes conformβ¦β3,051Jul 27, 2026Updated 2 months ago
- A toolkit for building secure, portable and lean operating systems for containersβ8,666Updated this week
- GitHub Action to get a license overview in SPDX formatβ14Dec 24, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform β’ AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- The Open Source Discovery Serviceβ1,159Oct 2, 2026Updated 2 weeks ago
- Repolinter, The Open Source Repository Linterβ465Feb 6, 2026Updated 8 months ago
- βοΈ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focβ¦β14,844Updated this week
- Application Kernel for Containersβ19,703Updated this week
- Linux system exploration and troubleshooting tool with first class support for containersβ8,305Apr 13, 2026Updated 6 months ago
- A handy guide to financial support for open sourceβ7,695Aug 6, 2025Updated last year
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alertsβ50Jul 25, 2026Updated 2 months ago
- TODO Group Governanceβ101Sep 17, 2026Updated last month
- Cloud Native Runtime Securityβ9,488Updated this week
- Managed Kubernetes at scale on DigitalOcean β’ AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Dockerfile linter, validate inline bash, written in Haskellβ12,483Updated this week
- Code signing and transparency for containers and binariesβ6,370Updated this week
- GitHub App to set and enforce security policiesβ1,461Updated this week
- π₯ Language focused docker images, minus the operating system.β23,147Updated this week
- Useful IT policiesβ4,882Jan 23, 2024Updated 2 years ago
- Bash Automated Testing Systemβ7,102Sep 27, 2019Updated 7 years ago
- The sustainoss.org websiteβ34Jun 19, 2026Updated 3 months ago
- in-toto is a framework to protect supply chain integrity.β1,052Aug 27, 2026Updated last month
- The easiest, and most secure way to access and protect all of your infrastructure.β21,004Sep 17, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer β’ AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Simple and flexible tool for managing secretsβ23,430Updated this week
- A Benchmark for Container Orchestration Systemsβ19Oct 2, 2017Updated 9 years ago
- A curated list of amazingly awesome open source sysadmin resources inspired by Awesome PHP.β24,353Mar 26, 2024Updated 2 years ago
- Work with remote images registries - retrieving information, images, signing contentβ11,319Updated this week
- OpenSSF Security Tooling Working Groupβ328Jul 6, 2025Updated last year
- Python reference implementation of The Update Framework (TUF)β1,729Updated this week
- Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmarkβ8,226Oct 5, 2026Updated last week