Alternatives and similar repositories for ratchet

Users that are interested in ratchet are comparing it to the libraries listed below

• sigstore / gitsign
  Keyless Git signing using Sigstore
  ☆1,011Updated last week
• gruntwork-io / git-xargs
  git-xargs is a command-line tool (CLI) for making updates across multiple Github repositories with a single command.
  ☆1,021Updated 2 weeks ago
• ossf / allstar
  GitHub App to set and enforce security policies
  ☆1,347Updated 2 weeks ago
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆288Updated last year
• step-security / harden-runner
  Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…
  ☆859Updated last week
• palantir / policy-bot
  A GitHub App that enforces approval policies on pull requests
  ☆870Updated this week
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆252Updated 2 years ago
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆490Updated last month
• updatecli / updatecli
  A Declarative Dependency Management tool
  ☆776Updated this week
• chainguard-images / images
  Public Chainguard Images
  ☆612Updated this week
• miniscruff / changie
  Automated changelog tool for preparing releases with lots of customization options
  ☆783Updated this week
• StyraInc / regal
  Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
  ☆319Updated this week
• chainguard-dev / apko
  Build OCI images from APK packages directly without Dockerfile
  ☆1,400Updated this week
• mazen160 / tfquery
  tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
  ☆325Updated 2 years ago
• anchore / scan-action
  Anchore container analysis and scan provided as a GitHub Action
  ☆250Updated this week
• replicatedhq / ttl.sh
  An anonymous & ephemeral Docker image registry
  ☆640Updated 9 months ago
• gittuf / gittuf
  A security layer for Git repositories
  ☆536Updated this week
• ycd / dstp
  🧪 Run common networking tests against any site.
  ☆1,019Updated 6 months ago
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆491Updated last week
• github / gh-valet
  Valet helps facilitate the migration of Azure DevOps, CircleCI, GitLab CI, Jenkins, and Travis CI pipelines to GitHub Actions.
  ☆508Updated 2 years ago
• google / gke-policy-automation
  Tool and policy library for reviewing Google Kubernetes Engine clusters against best practices
  ☆525Updated 2 weeks ago
• lindell / multi-gitter
  Update multiple repositories in with one command
  ☆1,055Updated this week
• aquasecurity / chain-bench
  An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…
  ☆754Updated 7 months ago
• dagger / dagger-for-github
  GitHub Action for Dagger
  ☆154Updated 4 months ago
• krisnova / naml
  Convert Kubernetes YAML to Golang
  ☆1,262Updated 2 years ago
• fugue / regula
  Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes se…
  ☆964Updated 11 months ago
• aquasecurity / trivy-action
  Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
  ☆1,012Updated 3 weeks ago
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆213Updated this week
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆275Updated last week
• cashapp / hermit
  🐚 Hermit manages isolated, self-bootstrapping sets of tools in software projects.
  ☆687Updated last week