Alternatives and similar repositories for governance

Users that are interested in governance are comparing it to the libraries listed below

• slsa-framework / slsa-proposals
  SLSA Proposals
  ☆10Updated last year
• ossf / tac
  Technical Advisory Council
  ☆129Updated last week
• ossf / scorecard-webapp
  Website and API for OpenSSF Scorecard
  ☆24Updated this week
• GSA / automate.fedramp.gov
  ☆16Updated last month
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆189Updated 2 months ago
• google / localtoast
  ☆113Updated 2 weeks ago
• mchmarny / disco
  Utility for bulk image, license, package, and vulnerability discovery in containerize workloads on GCP. Includes CLI and Service with cus…
  ☆13Updated last year
• ossf / scorecard-monitor
  Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
  ☆35Updated 2 months ago
• FIRSTdotorg / epss
  Exploit Prediction Scoring System (EPSS)
  ☆30Updated 3 years ago
• ossf / alpha-omega
  Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
  ☆107Updated last week
• ossf / wg-supply-chain-integrity
  Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …
  ☆186Updated last year
• sigstore / community
  General sigstore community repo
  ☆40Updated last week
• CVEProject / cve-documents
  Source for official CVE Program policy documents.
  ☆16Updated 3 weeks ago
• slsa-framework / slsa-jenkins-generator
  A proof-of-concept SLSA provenance generator for Jenkins
  ☆24Updated last year
• microsoft / scim
  Supply Chain Integrity Model
  ☆105Updated 2 years ago
• ossf / ai-ml-security
  Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
  ☆103Updated last month
• advanced-security / enterprise-security-team
  Manage a uniform team of security managers for every organization in your enterprise
  ☆18Updated 11 months ago
• philips-labs / continuous-compliance-action
  Continuous Compliance makes it possible to enforce company policy on repositories. Continuous Compliance will automatically check your re…
  ☆22Updated last year
• OWASP / OpenCRE
  ☆119Updated this week
• slsa-framework / azure-devops-demo
  SLSA Azure DevOps Pipelines Extension
  ☆30Updated 11 months ago
• github / ghas-jira-integration
  Synchronize GitHub Code Scanning alerts to Jira issues
  ☆90Updated 2 weeks ago
• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated 6 months ago
• ossf / Project-Security-Metrics
  Collect, curate, and communicate relevant security metrics for open source projects.
  ☆63Updated last year
• github / entitlements-gitrepo-auditor-plugin
  Entitlements plugin for a robust audit log
  ☆21Updated 3 weeks ago
• slsa-framework / github-actions-demo
  Proof-of-concept SLSA provenance generator for GitHub Actions
  ☆100Updated 2 years ago
• github / cleanowners
  A GitHub Action to suggest removal of non-organization members from CODEOWNERS files
  ☆133Updated last week
• googleworkspace / workspace-guardrails-ps-ca
  ☆20Updated 2 years ago
• github / enable-security-alerts-sample
  This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given …
  ☆80Updated 10 months ago
• VexStore / fatbom
  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…
  ☆33Updated 2 years ago
• google / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆137Updated last year