snyk / snyk-docker-plugin
This plugin provides dependency metadata for Docker images
☆34Updated this week
Alternatives and similar repositories for snyk-docker-plugin:
Users that are interested in snyk-docker-plugin are comparing it to the libraries listed below
- Static analysis for CloudFormation templates to identify common misconfiguration☆57Updated 3 years ago
- Compare vulnerability scanners results (to make them better!)☆16Updated last week
- Sysdig Terraform provider. Allow to handle Sysdig Secure policies as code.☆52Updated last week
- Awesome Snyk community contributions, champions, integrations, blogs, tools and more 💜☆46Updated 2 years ago
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆33Updated 3 weeks ago
- ☆27Updated this week
- An interactive shell for exploring the Snyk API☆8Updated 2 years ago
- Darkbit Cloud Security Tools☆25Updated 4 years ago
- ☆15Updated last month
- ☆12Updated last week
- Proof of Value Terraform Scripts to utilize Amazon Web Services (AWS) Security, Identity & Compliance Services to Support your AWS Accoun…☆16Updated 4 years ago
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Updated last month
- An SBOM query language and associated utilities☆54Updated last year
- Proof-of-concept SLSA provenance generator for GitHub Actions☆99Updated 2 years ago
- Policy Pipeline : place an SDLC around your compliance documentation with a pipeline that renders policy-as-code to human friendly format…☆11Updated 4 years ago
- Grafeas with PostgreSQL backend☆14Updated last month
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆95Updated 10 months ago
- Details on npm provenance☆12Updated 3 months ago
- Simple tool that allows you to detect imposter commits in GitHub Actions workflows.☆23Updated 2 months ago
- A broker system between a public service and a private service☆105Updated this week
- Terraform module to provision AWS Security Hub☆20Updated last month
- An orb for ShellCheck, a static analysis tool for shell scripts (https://shellcheck.net) — check all scripts in your repository on every …☆19Updated this week
- Be notified of EC2 instance events 🚀 from any region 🗺️ via a Cloudtrail CloudWatch Logs subscription filter !Rules☆9Updated 4 years ago
- The vulnerability disclosure policy for 18F and GSA's Technology Transformation Service.☆27Updated 3 years ago
- GitOps workflow for managing app delivery on multiple clusters☆23Updated 5 years ago
- ☆18Updated 11 months ago
- Terraform modules for CloudSploit Scanner☆14Updated 2 years ago
- AWS container security survey 2020☆11Updated 4 years ago
- Grype vulnerability check plugin for Visual Studio Code☆22Updated 2 months ago
- Action for generating SBOM attestations for workflow artifacts☆25Updated last week