Alternatives and similar repositories for github-actions-goat

Users that are interested in github-actions-goat are comparing it to the libraries listed below

• TupleType / awesome-cicd-attacks
  Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  ☆530Updated 4 months ago
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆89Updated 2 months ago
• openai / openai-security-bots
  ☆370Updated last year
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆319Updated this week
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆349Updated last month
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆285Updated 10 months ago
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆755Updated last year
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆306Updated 2 weeks ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious npm and PyPI packages
  ☆150Updated last week
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆97Updated 5 months ago
• cider-security-research / top-10-cicd-security-risks
  ☆416Updated 2 years ago
• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆330Updated 2 months ago
• tldrsec / awesome-secure-defaults
  Awesome secure by default libraries to help you eliminate bug classes!
  ☆698Updated 2 months ago
• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆136Updated last year
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated 10 months ago
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆813Updated 3 months ago
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆187Updated 3 months ago
• BishopFox / cloudfoxable
  Create your own vulnerable by design AWS penetration testing playground
  ☆384Updated 2 months ago
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆661Updated 4 months ago
• awslabs / threat-composer
  A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
  ☆588Updated 3 weeks ago
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆108Updated last year
• OWASP / OpenCRE
  ☆116Updated this week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆173Updated 7 months ago
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆143Updated last year
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆208Updated this week
• ine-labs / GCPGoat
  GCPGoat : A Damn Vulnerable GCP Infrastructure
  ☆400Updated 8 months ago
• tadwhitaker / Security_Architect_and_Principal_Security_Engineer_Interview_Questions
  This is a companion to the Security Engineer Questions
  ☆203Updated last year
• latiotech / LAST
  Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  ☆174Updated 2 months ago
• ramimac / aws-customer-security-incidents
  A repository of breaches of AWS customers
  ☆771Updated last month
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆293Updated 5 months ago