Alternatives and similar repositories for github-actions-goat

Users that are interested in github-actions-goat are comparing it to the libraries listed below

• TupleType / awesome-cicd-attacks
  Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  ☆561Updated last month
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆328Updated this week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆347Updated last week
• openai / openai-security-bots
  ☆378Updated last year
• DataDog / supply-chain-firewall
  Supply-Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages
  ☆206Updated this week
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆90Updated last month
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆369Updated 2 months ago
• tldrsec / awesome-secure-defaults
  Awesome secure by default libraries to help you eliminate bug classes!
  ☆701Updated 7 months ago
• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆336Updated 7 months ago
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆725Updated 9 months ago
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆290Updated last year
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆759Updated last year
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆820Updated 8 months ago
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆146Updated last year
• cider-security-research / top-10-cicd-security-risks
  ☆421Updated 2 years ago
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated last year
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆193Updated 7 months ago
• BishopFox / cloudfoxable
  Create your own vulnerable by design AWS penetration testing playground
  ☆407Updated 3 months ago
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆313Updated 2 months ago
• AdnaneKhan / gato-x
  GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
  ☆466Updated this week
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆212Updated last week
• DataDog / grimoire
  Generate datasets of cloud audit logs for common attacks
  ☆226Updated last year
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆155Updated last year
• OWASP / OpenCRE
  ☆131Updated last month
• awslabs / threat-designer
  Threat Designer is a GenerativeAI application designed to automate and streamline the threat modeling process for secure system design.
  ☆170Updated this week
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆100Updated last week
• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆136Updated last year
• mikeprivette / awesome-sec-challenges
  A curated list of Awesome Security Challenges.
  ☆197Updated last year
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆75Updated 3 months ago
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆305Updated 3 months ago