Alternatives and similar repositories for ratchet

Users that are interested in ratchet are comparing it to the libraries listed below

• sigstore / gitsign
  Keyless Git signing using Sigstore
  ☆1,036Updated this week
• gruntwork-io / git-xargs
  git-xargs is a command-line tool (CLI) for making updates across multiple Github repositories with a single command.
  ☆1,045Updated 3 months ago
• step-security / harden-runner
  Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…
  ☆896Updated last week
• ossf / allstar
  GitHub App to set and enforce security policies
  ☆1,363Updated this week
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆288Updated last year
• palantir / policy-bot
  A GitHub App that enforces approval policies on pull requests
  ☆899Updated last week
• updatecli / updatecli
  A Declarative Dependency Management tool
  ☆809Updated this week
• chainguard-images / images
  Public Chainguard Images
  ☆630Updated this week
• miniscruff / changie
  Automated changelog tool for preparing releases with lots of customization options
  ☆807Updated last week
• lindell / multi-gitter
  Update multiple repositories in with one command
  ☆1,107Updated 2 weeks ago
• gittuf / gittuf
  A security layer for Git repositories
  ☆553Updated this week
• replicatedhq / ttl.sh
  An anonymous & ephemeral Docker image registry
  ☆670Updated 3 weeks ago
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆251Updated 2 years ago
• anchore / scan-action
  Anchore container analysis and scan provided as a GitHub Action
  ☆255Updated last week
• chainloop-dev / chainloop
  Evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
  ☆505Updated this week
• open-policy-agent / regal
  Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
  ☆344Updated this week
• github / safe-settings
  ☆786Updated last week
• fugue / regula
  Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes se…
  ☆962Updated last year
• self-actuated / actions-usage
  Find your total usage on GitHub Actions
  ☆187Updated last year
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆511Updated 3 months ago
• owenrumney / lazytrivy
  Vulnerability scanning just got lazier
  ☆301Updated 2 weeks ago
• mazen160 / tfquery
  tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
  ☆332Updated 2 years ago
• env0 / terratag
  Terratag is a CLI tool that enables users of Terraform to automatically create and maintain tags across their entire set of AWS, Azure, a…
  ☆1,017Updated 3 months ago
• chainguard-dev / apko
  Build OCI images from APK packages directly without Dockerfile
  ☆1,445Updated this week
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆498Updated this week
• tellerops / teller
  Cloud native secrets management for developers - never leave your command line for secrets.
  ☆3,145Updated last year
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆1,019Updated last week
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆233Updated last week
• sigstore / fulcio
  Sigstore OIDC PKI
  ☆765Updated this week
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆288Updated 2 months ago