Alternatives and similar repositories for github-actions-scanner

Users that are interested in github-actions-scanner are comparing it to the libraries listed below

• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated last year
• github / audit-actions-workflow-runs
  Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded
  ☆77Updated this week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆344Updated 2 weeks ago
• orcasecurity-research / kte
  Test & Compare different Kubernetes security offerings on EKS, GKE and AKS
  ☆40Updated last year
• AdnaneKhan / gato-x
  GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
  ☆463Updated this week
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• nikitastupin / pwnhub
  How GitHub Actions workflows can be hacked
  ☆171Updated last year
• opengrep / opengrep-rules
  ☆100Updated 9 months ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆94Updated 3 months ago
• Checkmarx / 2ms
  Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git
  ☆137Updated this week
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆193Updated 7 months ago
• Checkmarx / dustilock
  DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.
  ☆40Updated 3 years ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆74Updated 2 months ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆42Updated 2 years ago
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆100Updated last week
• TinderSec / oidc-scanner-aws
  ☆49Updated 2 years ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆137Updated 3 weeks ago
• DataDog / supply-chain-firewall
  Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages
  ☆173Updated this week
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆107Updated 2 years ago
• luisfontes19 / orgsec-guide
  A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity program
  ☆46Updated last month
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆113Updated last month
• CycodeLabs / cimon-action
  Runtime Security Solution for your CI/CD Pipeline
  ☆111Updated 5 months ago
• smithy-security / smithy
  The security workflow engine!
  ☆129Updated 3 weeks ago
• synacktiv / octoscan
  Octoscan is a static vulnerability scanner for GitHub action workflows.
  ☆232Updated this week
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆279Updated last year
• apiiro / malicious-code-ruleset
  Focused malicious code detection ruleset, with a high protection-to-noise ratio
  ☆127Updated 8 months ago
• nccgroup / ccs
  ☆114Updated 2 years ago
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆227Updated 5 months ago
• controlplaneio / truffleproc
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
  ☆121Updated 2 years ago