Alternatives and similar repositories for ratchet

Users that are interested in ratchet are comparing it to the libraries listed below

• sigstore / gitsign
  Keyless Git signing using Sigstore
  ☆1,039Updated 3 weeks ago
• step-security / harden-runner
  Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…
  ☆911Updated last week
• gruntwork-io / git-xargs
  git-xargs is a command-line tool (CLI) for making updates across multiple Github repositories with a single command.
  ☆1,058Updated 3 months ago
• ossf / allstar
  GitHub App to set and enforce security policies
  ☆1,369Updated this week
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆288Updated 2 years ago
• open-policy-agent / regal
  Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
  ☆348Updated this week
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆517Updated 3 weeks ago
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆251Updated 2 years ago
• miniscruff / changie
  Automated changelog tool for preparing releases with lots of customization options
  ☆814Updated last week
• updatecli / updatecli
  A Declarative Update Policy Engine
  ☆818Updated this week
• lindell / multi-gitter
  Update multiple repositories in with one command
  ☆1,116Updated this week
• replicatedhq / ttl.sh
  An anonymous & ephemeral Docker image registry
  ☆672Updated 3 weeks ago
• chainguard-images / images
  Public Chainguard Images
  ☆633Updated this week
• github / safe-settings
  ☆800Updated 2 weeks ago
• gittuf / gittuf
  A security layer for Git repositories
  ☆556Updated this week
• palantir / policy-bot
  A GitHub App that enforces approval policies on pull requests
  ☆903Updated this week
• anchore / scan-action
  Anchore container analysis and scan provided as a GitHub Action
  ☆256Updated last week
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆502Updated last week
• google / gke-policy-automation
  Tool and policy library for reviewing Google Kubernetes Engine clusters against best practices
  ☆525Updated 3 months ago
• dagger / dagger-for-github
  GitHub Action for Dagger
  ☆161Updated last month
• fugue / regula
  Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes se…
  ☆962Updated last year
• mazen160 / tfquery
  tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
  ☆332Updated 3 years ago
• owenrumney / lazytrivy
  Vulnerability scanning just got lazier
  ☆303Updated last week
• chainguard-dev / apko
  Build OCI images from APK packages directly without Dockerfile
  ☆1,457Updated this week
• sigstore / fulcio
  Sigstore OIDC PKI
  ☆766Updated this week
• project-copacetic / copacetic
  🧵 CLI tool for directly patching container images!
  ☆1,476Updated this week
• env0 / terratag
  Terratag is a CLI tool that enables users of Terraform to automatically create and maintain tags across their entire set of AWS, Azure, a…
  ☆1,025Updated 3 months ago
• self-actuated / actions-usage
  Find your total usage on GitHub Actions
  ☆187Updated last year
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆1,025Updated this week
• aquasecurity / trivy-action
  Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
  ☆1,104Updated 2 months ago