Alternatives and similar repositories for governance:

Users that are interested in governance are comparing it to the libraries listed below

• advanced-security / enterprise-security-team
  Manage a uniform team of security managers for every organization in your enterprise
  ☆17Updated 8 months ago
• ossf / scorecard-webapp
  Website and API for OpenSSF Scorecard
  ☆24Updated this week
• philips-labs / continuous-compliance-action
  Continuous Compliance makes it possible to enforce company policy on repositories. Continuous Compliance will automatically check your re…
  ☆21Updated 11 months ago
• sigstore / community
  General sigstore community repo
  ☆41Updated last week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆183Updated 2 weeks ago
• GoogleCloudPlatform / scoutsuite-gcp-scan
  Terraform to run Scoutsuite security scan of projects within a Google Cloud Org. Report will be published to a GCS bucket.
  ☆17Updated last year
• VexStore / fatbom
  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…
  ☆32Updated 2 years ago
• google / localtoast
  ☆112Updated 4 months ago
• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated 3 months ago
• ossf / DevRel-community
  Evangelizing the mission and work of the OpenSSF and building strong community outreach around end-users, open-source maintainers, and co…
  ☆22Updated last year
• github / actions-oidc-gateway-example
  Example of using Actions OIDC token to proxy into a private network
  ☆92Updated last month
• slsa-framework / azure-devops-demo
  SLSA Azure DevOps Pipelines Extension
  ☆28Updated 8 months ago
• ossf / tac
  Technical Advisory Council
  ☆123Updated this week
• slsa-framework / slsa-github-generator-go
  ☆56Updated 2 years ago
• chainguard-dev / ghscan
  Scan GitHub Actions Workflow logs for IOCs
  ☆15Updated this week
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• slsa-framework / slsa-jenkins-generator
  A proof-of-concept SLSA provenance generator for Jenkins
  ☆21Updated 9 months ago
• boozallen / goobernetes
  On-prem GitHub Actions runners, backed by Kubernetes
  ☆36Updated 3 years ago
• ossf / ai-ml-security
  Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
  ☆77Updated 6 months ago
• microsoft / scim
  Supply Chain Integrity Model
  ☆104Updated last year
• secure-systems-lab / dsse
  A specification for signing methods and formats used by Secure Systems Lab projects.
  ☆76Updated 8 months ago
• github / ghas-jira-integration
  Synchronize GitHub Code Scanning alerts to Jira issues
  ☆85Updated last month
• ossf / wg-securing-software-repos
  OpenSSF Working Group on Securing Software Repositories
  ☆104Updated 3 weeks ago
• mlieberman85 / scq
  Supply Chain Query Tool
  ☆13Updated 2 years ago
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated 2 years ago
• SBOMit / specification
  ☆62Updated 9 months ago
• in-toto / archivista
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…
  ☆91Updated this week
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆134Updated this week
• advanced-security / GSSAR
  GitHub Secret Scanning Auto Remediator (GSSAR)
  ☆44Updated last month
• actions / importer-issue-ops
  GitHub Actions Importer helps you plan and automate the migration of Azure DevOps, Bamboo, CircleCI, GitLab, Jenkins, and Travis CI pipel…
  ☆55Updated 9 months ago