Alternatives and similar repositories for vet

Users that are interested in vet are comparing it to the libraries listed below

• mindersec / minder
  Software Supply Chain Security Platform
  ☆358Updated this week
• mongodb / kingfisher
  Kingfisher is a blazingly fast and highly accurate tool for secret detection and live validation across files, Git repos, GitHub, GitLab,…
  ☆620Updated this week
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆702Updated 8 months ago
• opengrep / opengrep-rules
  ☆100Updated 9 months ago
• apiiro / PRevent
  Prevent merging of malicious code in pull requests
  ☆239Updated 7 months ago
• xeol-io / xeol
  A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
  ☆419Updated last week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆344Updated 2 weeks ago
• Mixeway / Flow
  Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams
  ☆75Updated this week
• smithy-security / smithy
  The security workflow engine!
  ☆129Updated 3 weeks ago
• turbot / tailpipe
  select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, r…
  ☆516Updated last week
• google / osv-scalibr
  OSV-SCALIBR: A library for Software Composition Analysis
  ☆529Updated last week
• gittuf / gittuf
  A security layer for Git repositories
  ☆556Updated this week
• Checkmarx / 2ms
  Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git
  ☆137Updated this week
• SecObserve / SecObserve
  SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…
  ☆189Updated this week
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆327Updated last month
• opengrep / opengrep
  🔎 Static code analysis engine to find security issues in code.
  ☆1,846Updated this week
• crashappsec / chalk
  Chalk allows you to follow code from development, through builds and into production.
  ☆410Updated this week
• nianticlabs / venator
  A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalo…
  ☆383Updated last year
• edera-dev / am-i-isolated
  Validate the isolation posture of your container environment.
  ☆303Updated 3 months ago
• protobom / protobom
  A universal SBOM representation in protocol buffers
  ☆307Updated this week
• DataDog / supply-chain-firewall
  Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages
  ☆173Updated this week
• apiiro / malicious-code-ruleset
  Focused malicious code detection ruleset, with a high protection-to-noise ratio
  ☆127Updated 8 months ago
• kondukto-io / kntrl
  kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …
  ☆122Updated last month
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆817Updated 7 months ago
• tldrsec / awesome-secure-defaults
  Awesome secure by default libraries to help you eliminate bug classes!
  ☆700Updated 6 months ago
• chainloop-dev / chainloop
  SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
  ☆511Updated this week
• ghostsecurity / reaper
  💀 Don't fear the Reaper 👻
  ☆694Updated 3 weeks ago
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆590Updated 7 months ago
• CycodeLabs / cimon-action
  Runtime Security Solution for your CI/CD Pipeline
  ☆111Updated 5 months ago
• fraim-dev / fraim
  A flexible framework for security teams to build and deploy AI-powered workflows that complement their existing security operations.
  ☆137Updated last week