Alternatives and similar repositories for scorecard-action

Users that are interested in scorecard-action are comparing it to the libraries listed below

• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆285Updated last week
• advanced-security / policy-as-code
  GitHub Advanced Security Policy as Code
  ☆82Updated last week
• anchore / sbom-action
  GitHub Action for creating software bill of materials using Syft.
  ☆187Updated last week
• github / evergreen
  GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…
  ☆201Updated this week
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆472Updated 2 weeks ago
• github / cleanowners
  A GitHub Action to suggest removal of non-organization members from CODEOWNERS files
  ☆135Updated this week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆185Updated last month
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆262Updated last week
• step-security / harden-runner
  Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…
  ☆830Updated this week
• GitHubSecurityLab / actions-permissions
  GitHub token permissions Monitor and Advisor actions
  ☆293Updated last week
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆173Updated 2 months ago
• github / stale-repos
  Find stale repositories in a GitHub organization.
  ☆182Updated this week
• github / contributors
  GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.
  ☆122Updated last week
• github / ghas-jira-integration
  Synchronize GitHub Code Scanning alerts to Jira issues
  ☆87Updated 2 months ago
• github-community-projects / private-mirrors
  A GitHub App that allows you to contribute upstream using private mirrors of public projects
  ☆163Updated this week
• in-toto / attestation
  in-toto Attestation Framework
  ☆274Updated 2 weeks ago
• actions / dependency-review-action
  A GitHub Action for detecting vulnerable dependencies and invalid licenses in your PRs
  ☆687Updated last week
• GeekMasher / advanced-security-compliance
  GitHub Advance Security Compliance Action
  ☆132Updated 2 years ago
• github / ossar-action
  Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).
  ☆96Updated last year
• stacklok / frizbee
  Throw a tag at it and it comes back with a checksum.
  ☆136Updated this week
• zkoppert / advanced-security-enforcer
  A GitHub action for organizations that enables advanced security code scanning on all new repos
  ☆39Updated last month
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆229Updated 9 months ago
• ossf / wg-securing-software-repos
  OpenSSF Working Group on Securing Software Repositories
  ☆106Updated last week
• SvanBoxel / organization-workflows
  Need to centrally manage and run Actions workflows across multiple repositories? This app does it for you.
  ☆133Updated last year
• CycloneDX / specification
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…
  ☆398Updated last week
• CycloneDX / cyclonedx-cli
  CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
  ☆365Updated 6 months ago
• sigstore / cosign-installer
  Cosign Github Action
  ☆148Updated 2 weeks ago
• peter-murray / github-security-report-action
  ☆80Updated last year
• slsa-framework / github-actions-demo
  Proof-of-concept SLSA provenance generator for GitHub Actions
  ☆99Updated 2 years ago
• advanced-security / secret-scanning-custom-patterns
  Examples of Custom Secret Scanning Patterns
  ☆161Updated 3 months ago