Alternatives and similar repositories for ai-codewise

Users that are interested in ai-codewise are comparing it to the libraries listed below

• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆233Updated last year
• slsa-framework / slsa-github-generator-go
  ☆57Updated 3 years ago
• chainguard-dev / cosign-ecs-verify
  Lambda function for verifying signed images in ECS
  ☆33Updated last year
• slsa-framework / github-actions-demo
  Proof-of-concept SLSA provenance generator for GitHub Actions
  ☆100Updated 2 years ago
• ossf / security-assessments
  ☆15Updated last week
• in-toto / archivista
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…
  ☆99Updated this week
• step-security / agent
  Purpose-built security agent for hosted runners
  ☆38Updated 3 weeks ago
• deislabs / image-layer-provenance
  Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
  ☆43Updated last year
• boxboat / grypeadmissioncontroller
  This repository hosts the admission controller build on top of grype.
  ☆20Updated 2 months ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆33Updated 4 months ago
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆252Updated 2 years ago
• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆295Updated 3 weeks ago
• wolfi-dev / wolfi-act
  Dynamic GitHub Actions from Wolfi packages
  ☆44Updated 3 months ago
• openvex / spec
  OpenVEX Specification
  ☆156Updated 3 months ago
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆153Updated last week
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆190Updated last week
• chainguard-dev / actions
  A collection of reusable Github Actions workflows.
  ☆139Updated this week
• turbot / steampipe-plugin-gcp
  Use SQL to instantly query GCP resources across regions, projects and organizations. Open source CLI. No DB required.
  ☆44Updated this week
• in-toto / attestation-verifier
  Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts
  ☆16Updated this week
• mindersec / minder
  Software Supply Chain Security Platform
  ☆348Updated last week
• octo-sts / action
  ☆46Updated last week
• in-toto / scai-demos
  Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools
  ☆18Updated this week
• SBOMit / specification
  ☆65Updated last year
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆281Updated last month
• anchore / vunnel
  Tool for collecting vulnerability data from various sources (used to build the grype database)
  ☆101Updated this week
• mchmarny / s3cme
  Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…
  ☆104Updated last year
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆45Updated 2 years ago
• ChaosInTheCRD / Dexter
  Trust Dexter to ensure that all your images are pinned by digest for better security
  ☆30Updated last year
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆60Updated 2 years ago