otto-de / threatmodeling-resources

Related projects ⓘ

Alternatives and complementary repositories for threatmodeling-resources

• dependency-check / Dependency-Check_Action
  Github action to run dependency check
  ☆71Updated 3 months ago
• wurstbrot / security-pins
  Pin designs for security related items
  ☆37Updated 6 months ago
• OWASP / www-project-integration-standards
  OWASP Foundation Web Respository
  ☆27Updated 2 months ago
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆104Updated 9 months ago
• otto-de / TeamDojo
  UI für verschiedene Reifegrad-Dimensionen
  ☆31Updated last year
• AppSecure-nrw / security-belts
  ☆102Updated 4 months ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆75Updated 2 months ago
• zapbot / zap-mgmt-scripts
  ZAP Management Scripts
  ☆21Updated this week
• ozontech / dtrack-audit
  OWASP Dependency Track API client for intergration into CI/CD pipeline
  ☆51Updated 3 months ago
• OWASP / OpenCRE
  ☆79Updated this week
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆57Updated last year
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆79Updated 2 months ago
• Skyscanner / sonar-secrets
  SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc..
  ☆100Updated 11 months ago
• mllamazares / vulncov
  🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.
  ☆32Updated 3 weeks ago
• secmerc / materialize-threats
  ☆61Updated last year
• Vulnetix / vulnetix
  Automate vulnerability triage which prioritizes remediation over discovery
  ☆14Updated this week
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆55Updated 4 months ago
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆76Updated 5 months ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆169Updated 8 months ago
• DefectDojo / Community-Contribs
  DefectDojo Community Content
  ☆17Updated 3 weeks ago
• CloudWanderer-io / PolicyGlass
  PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicySh…
  ☆58Updated 2 years ago
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆47Updated last month
• xen0l / iam-lint
  Github action for linting AWS IAM policy documents
  ☆36Updated last year
• TinderSec / oidc-scanner-aws
  ☆47Updated last year
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆69Updated last year
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆134Updated 6 months ago
• mario-platt / ASVS-Agile-Delivery-Guide
  ☆36Updated 3 years ago