☆149Apr 10, 2026Updated this week
Alternatives and similar repositories for security-baseline
Users that are interested in security-baseline are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Privateer plugin for scanning the security hygiene of a GitHub repository.☆21Updated this week
- ORBIT: Open Resources for Baselines, Interoperability, and Tooling☆22Mar 19, 2026Updated 3 weeks ago
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆47Mar 28, 2026Updated 2 weeks ago
- Format agnostic SBOM tooling☆136Nov 20, 2025Updated 4 months ago
- Validate the SPDX SBOM against NTIA, CISA, and other minimum element requirements.☆85Mar 30, 2026Updated last week
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Privateer is a plugin-based framework for security & compliance evaluations.☆19Updated this week
- Global Cyber Policy Working Group☆109Apr 2, 2026Updated last week
- Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security☆159Dec 19, 2025Updated 3 months ago
- Vuln Disclosure WG's new SIG☆11Jan 2, 2024Updated 2 years ago
- Minimizing rework for governance activities.☆49Updated this week
- Machine-readable specification for the attestation of security-relevant data.☆73Mar 19, 2026Updated 3 weeks ago
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆229May 26, 2025Updated 10 months ago
- Log monitor for Rekor to verify immutability and monitor entries☆49Updated this week
- sbomasm: The Complete SBOM Management Toolkit☆110Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- ☆20Jul 16, 2025Updated 8 months ago
- Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages☆255Apr 1, 2026Updated last week
- Technical Advisory Council☆139Apr 2, 2026Updated last week
- A Python client for the Global CVE Allocation System.☆17Mar 26, 2026Updated 2 weeks ago
- A Yocto meta-layer for generating CycloneDX SBOMs☆25Mar 29, 2026Updated last week
- ☆16Updated this week
- A standard API specification for exchanging supply chain artifacts and intelligence☆106Mar 25, 2026Updated 2 weeks ago
- A Python library to parse, validate and create SPDX documents.☆243Mar 13, 2026Updated 3 weeks ago
- FINOS Common Cloud Controls☆79Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- Website and API for OpenSSF Scorecard☆28Apr 3, 2026Updated last week
- A library to convert between Sigstore Bundles and PEP 740 Attestation objects☆15Updated this week
- ☆59Mar 30, 2026Updated last week
- OpenSSF Working Group on Securing Software Repositories☆128Dec 18, 2025Updated 3 months ago
- Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.☆121Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆240Aug 13, 2024Updated last year
- The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for ope…☆1,005Apr 3, 2026Updated last week
- Cause sometimes you just need to dance ...☆10Oct 21, 2019Updated 6 years ago
- The model for the information captured in SPDX version 3 standard.☆99Mar 31, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- Perform code analysis to detect potentially dangerous vulnerabilities☆14Apr 16, 2024Updated last year
- Red team oriented key finder and correlator☆21Nov 21, 2025Updated 4 months ago
- A self assessment tool to help understand your level in the SANS Vulnerability Management Maturity Model (VMMM).☆54Apr 2, 2026Updated last week
- Run multiple-node, decentralized k3s clusters on Github action runners for test and development!☆11Nov 20, 2021Updated 4 years ago
- Data about all known supply-chain attacks through history☆65May 28, 2025Updated 10 months ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,472Updated this week
- Examples of SPDX files for software combinations☆145Mar 31, 2026Updated last week