Alternatives and similar repositories for governance

Users that are interested in governance are comparing it to the libraries listed below

• mchmarny / disco
  Utility for bulk image, license, package, and vulnerability discovery in containerize workloads on GCP. Includes CLI and Service with cus…
  ☆14Updated last year
• advanced-security / enterprise-security-team
  Manage a uniform team of security managers for every organization in your enterprise
  ☆17Updated 9 months ago
• ossf / scorecard-webapp
  Website and API for OpenSSF Scorecard
  ☆25Updated 3 weeks ago
• google / localtoast
  ☆112Updated last week
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 2 months ago
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated 2 years ago
• chainguard-dev / justtrustme
  ☆54Updated this week
• GoogleCloudPlatform / scoutsuite-gcp-scan
  Terraform to run Scoutsuite security scan of projects within a Google Cloud Org. Report will be published to a GCS bucket.
  ☆17Updated last year
• swagitda / security-decision-trees-graphviz
  Decision trees generated via Graphviz to inform pragmatic threat modelling.
  ☆11Updated 4 years ago
• chainguard-dev / ghscan
  Scan GitHub Actions Workflow logs for IOCs
  ☆15Updated this week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆185Updated last week
• sigstore / community
  General sigstore community repo
  ☆41Updated this week
• microsoft / scim
  Supply Chain Integrity Model
  ☆105Updated last year
• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated 4 months ago
• primeharbor / breaches.cloud
  https://breaches.cloud
  ☆39Updated 7 months ago
• communitysec / sbom-hall-of-fame
  A place for the InfoSec community to share and celebrate real stories of organizations successfully using SBOMs (and other bills of mater…
  ☆42Updated last year
• cloud-native-security-controls / controls-catalog
  ☆16Updated last year
• googleworkspace / workspace-guardrails-ps-ca
  ☆20Updated 2 years ago
• devops-kung-fu / lucha
  A CLI that scans for sensitive data in source code
  ☆14Updated 2 years ago
• GoogleCloudPlatform / assured-workloads-terraform
  ☆16Updated 10 months ago
• FIRSTdotorg / epss
  Exploit Prediction Scoring System (EPSS)
  ☆26Updated 3 years ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• ossf / ossf-landscape
  ☆29Updated this week
• aidansteele / awsaccountcreds
  ☆22Updated 2 years ago
• DataDog / workload-security-evaluator
  Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.
  ☆31Updated 7 months ago
• ossf / tac
  Technical Advisory Council
  ☆124Updated last week
• VexStore / fatbom
  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…
  ☆32Updated 2 years ago
• carta / krang
  Knowledge Report Alert & Normalization Generator
  ☆27Updated last year
• secure-systems-lab / dsse
  A specification for signing methods and formats used by Secure Systems Lab projects.
  ☆78Updated 8 months ago
• sysdiglabs / k8s-security-configwatch
  Git action to generate security lint report for Kubernetes workload YAML files on PR
  ☆28Updated 3 years ago