rise8-us / cato-playbookLinks
☆20Updated last year
Alternatives and similar repositories for cato-playbook
Users that are interested in cato-playbook are comparing it to the libraries listed below
Sorting:
- Gatecheck CI/CD Validation Tool☆15Updated 4 months ago
- (D)ocker(F)ile (C)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.☆94Updated 2 months ago
- NIST OSCAL SDK and CLI☆20Updated 2 weeks ago
- A tool to provision AWS Landing Zone according to best practices using Terraform☆31Updated 3 years ago
- The Compliance Validator☆184Updated 3 weeks ago
- Privateer is a plugin-based framework to validate the status of deployed resources.☆16Updated this week
- ☆41Updated this week
- Throw a tag at it and it comes back with a checksum.☆151Updated this week
- ForgeMT is a secure, scalable GitHub Actions runner platform for ephemeral workloads. Designed for multi-tenant environments, it automate…☆197Updated this week
- A Terraform module that makes it a snap to opt out of all AWS AI/ML data harvesting.☆30Updated last year
- Compare vulnerability scanners results (to make them better!)☆25Updated this week
- Measure release insights and recommendations for open-source dependencies. Note: this project is archived.☆10Updated 2 years ago
- Various tools, images, etc. to support the Wolfi OSS project☆27Updated this week
- Darkfiles finds orphaned files in container images and makes them to bad deeds☆42Updated 2 years ago
- argocd managed homelab running in k3s, with a helper written in go to bootstrap the cluster. can also be run with kvms/proxmox☆14Updated 5 months ago
- ☆13Updated 3 years ago
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆103Updated last week
- SBOM Move - Automate build and transfer of SBOMs across systems☆24Updated last week
- SPDX Merge tool☆48Updated 7 months ago
- Inspect certificate authorities in container images☆240Updated last week
- Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.☆78Updated 2 years ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆507Updated this week
- Automatically assess and score software repositories for supply chain risk.☆114Updated 2 weeks ago
- ☆22Updated 6 months ago
- ☆30Updated this week
- A terraform REPL.☆32Updated 2 years ago
- Dynamic Application Security Testing (DAST) for Cloud☆44Updated 3 years ago
- Type safe K8s middleware for humans☆210Updated this week
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆107Updated this week
- MKP is a Model Context Protocol (MCP) server for Kubernetes☆55Updated this week