Alternatives and similar repositories for governance

Users that are interested in governance are comparing it to the libraries listed below

• slsa-framework / slsa-proposals
  SLSA Proposals
  ☆10Updated last year
• ossf / scorecard-webapp
  Website and API for OpenSSF Scorecard
  ☆24Updated this week
• mchmarny / disco
  Utility for bulk image, license, package, and vulnerability discovery in containerize workloads on GCP. Includes CLI and Service with cus…
  ☆14Updated last year
• FIRSTdotorg / epss
  Exploit Prediction Scoring System (EPSS)
  ☆27Updated 3 years ago
• slsa-framework / slsa-jenkins-generator
  A proof-of-concept SLSA provenance generator for Jenkins
  ☆24Updated 10 months ago
• CVEProject / cve-documents
  Source for official CVE Program policy documents.
  ☆16Updated last month
• slsa-framework / azure-devops-demo
  SLSA Azure DevOps Pipelines Extension
  ☆30Updated 10 months ago
• FIRSTdotorg / openedx-docker
  A best practice Docker image of Open edX
  ☆19Updated last year
• philips-labs / continuous-compliance-action
  Continuous Compliance makes it possible to enforce company policy on repositories. Continuous Compliance will automatically check your re…
  ☆21Updated last year
• GSA / automate.fedramp.gov
  ☆15Updated last month
• swagitda / security-decision-trees-graphviz
  Decision trees generated via Graphviz to inform pragmatic threat modelling.
  ☆11Updated 4 years ago
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated 2 years ago
• sigstore / rekor-monitor
  Log monitor for Rekor to verify immutability and monitor entries
  ☆36Updated last week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆188Updated 3 weeks ago
• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated 5 months ago
• ossf / ossf-landscape
  ☆29Updated last week
• slsa-framework / slsa-github-generator-go
  ☆57Updated 3 years ago
• slsa-framework / oss-na24-slsa-workshop
  ☆10Updated last year
• FIRSTdotorg / edx-platform
  The Open edX platform, the software that powers edX!
  ☆13Updated 8 years ago
• microsoft / scim
  Supply Chain Integrity Model
  ☆105Updated 2 years ago
• CVEProject / Ideas
  ☆60Updated 2 months ago
• slsa-framework / github-actions-demo
  Proof-of-concept SLSA provenance generator for GitHub Actions
  ☆100Updated 2 years ago
• kusaridev / skootrs
  A CLI tool for creating secure by design/default source repos.
  ☆26Updated 10 months ago
• ossf / tac
  Technical Advisory Council
  ☆126Updated last week
• anchore / yardstick
  Compare vulnerability scanners results (to make them better!)
  ☆16Updated this week
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated 2 years ago
• spdx / spdx-3-model
  The model for the information captured in SPDX version 3 standard.
  ☆85Updated this week
• philips-labs / fatt
  fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl…
  ☆10Updated this week
• SBOMit / specification
  ☆62Updated 11 months ago
• sigstore / root-signing
  TUF repository for Sigstore trust root
  ☆105Updated this week