Alternatives and similar repositories for github-actions-goat

Users that are interested in github-actions-goat are comparing it to the libraries listed below

• step-security / harden-runner
  Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…
  ☆832Updated this week
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆346Updated last week
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆751Updated 10 months ago
• tldrsec / awesome-secure-defaults
  Awesome secure by default libraries to help you eliminate bug classes!
  ☆692Updated last month
• cider-security-research / top-10-cicd-security-risks
  ☆415Updated 2 years ago
• TupleType / awesome-cicd-attacks
  Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  ☆518Updated 3 months ago
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆285Updated 9 months ago
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆809Updated 2 months ago
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆282Updated this week
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆199Updated last week
• openai / openai-security-bots
  ☆368Updated last year
• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆329Updated last month
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆430Updated this week
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated 9 months ago
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆108Updated last year
• advanced-security / policy-as-code
  GitHub Advanced Security Policy as Code
  ☆82Updated 2 weeks ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆319Updated 2 weeks ago
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆183Updated last month
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆144Updated 11 months ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆248Updated 6 months ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious PyPI and npm packages
  ☆145Updated this week
• latiotech / LAST
  Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  ☆170Updated last month
• cado-security / cloudgrep
  cloudgrep is grep for cloud storage
  ☆326Updated 3 months ago
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆87Updated last month
• ramimac / aws-customer-security-incidents
  A repository of breaches of AWS customers
  ☆752Updated this week
• awslabs / threat-composer
  A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
  ☆567Updated last week
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆659Updated 3 months ago
• tadwhitaker / Security_Architect_and_Principal_Security_Engineer_Interview_Questions
  This is a companion to the Security Engineer Questions
  ☆203Updated last year
• aquasecurity / chain-bench
  An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…
  ☆748Updated 5 months ago
• jatrost / awesome-kubernetes-threat-detection
  A curated list of resources about detecting threats and defending Kubernetes systems.
  ☆383Updated last year