Alternatives and similar repositories for vet

Users that are interested in vet are comparing it to the libraries listed below

• mindersec / minder
  Software Supply Chain Security Platform
  ☆352Updated this week
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆674Updated 7 months ago
• gittuf / gittuf
  A security layer for Git repositories
  ☆546Updated this week
• apiiro / PRevent
  Prevent merging of malicious code in pull requests
  ☆235Updated 6 months ago
• turbot / tailpipe
  select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, r…
  ☆492Updated last week
• Mixeway / Flow
  Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams
  ☆75Updated this week
• google / osv-scalibr
  OSV-SCALIBR: A library for Software Composition Analysis
  ☆509Updated last week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆332Updated last week
• mongodb / kingfisher
  Kingfisher is a blazingly fast tool for secret detection and live validation across files, Git repos, S3, Docker images, Jira, Slack, and…
  ☆588Updated last week
• xeol-io / xeol
  A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
  ☆413Updated this week
• MaibornWolff / SecObserve
  SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It suppor…
  ☆181Updated this week
• opengrep / opengrep-rules
  ☆86Updated 8 months ago
• kondukto-io / kntrl
  kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this …
  ☆119Updated last week
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆815Updated 6 months ago
• opengrep / opengrep
  🔎 Static code analysis engine to find security issues in code.
  ☆1,661Updated last week
• edera-dev / am-i-isolated
  Validate the isolation posture of your container environment.
  ☆299Updated last month
• elementsinteractive / twyn
  Security tool against dependency typosquatting attacks
  ☆54Updated this week
• crashappsec / chalk
  Chalk allows you to follow code from development, through builds and into production.
  ☆406Updated last week
• tldrsec / awesome-secure-defaults
  Awesome secure by default libraries to help you eliminate bug classes!
  ☆700Updated 5 months ago
• nianticlabs / venator
  A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalo…
  ☆383Updated last year
• smithy-security / smithy
  The security workflow engine!
  ☆122Updated last week
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆153Updated 10 months ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆325Updated 2 months ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious npm and PyPI packages
  ☆165Updated this week
• CycodeLabs / cimon-action
  Runtime Security Solution for your CI/CD Pipeline
  ☆109Updated 3 months ago
• apiiro / malicious-code-ruleset
  Focused malicious code detection ruleset, with a high protection-to-noise ratio
  ☆128Updated 7 months ago
• chainloop-dev / chainloop
  Evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
  ☆492Updated this week
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆74Updated last month
• cerberauth / vulnapi
  API Security Vulnerability Scanner designed to help you secure your APIs.
  ☆179Updated this week
• ghostsecurity / reaper
  💀 Don't fear the Reaper 👻
  ☆600Updated 3 weeks ago