Alternatives and similar repositories for harden-runner:

Users that are interested in harden-runner are comparing it to the libraries listed below

• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆265Updated this week
• github / evergreen
  GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…
  ☆189Updated this week
• ossf / scorecard-action
  Official GitHub Action for OpenSSF Scorecard.
  ☆275Updated this week
• step-security / github-actions-goat
  GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment
  ☆451Updated 3 weeks ago
• Legit-Labs / legitify
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
  ☆789Updated 2 weeks ago
• gittuf / gittuf
  A security layer for Git repositories
  ☆473Updated this week
• GitHubSecurityLab / actions-permissions
  GitHub token permissions Monitor and Advisor actions
  ☆262Updated 3 weeks ago
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆438Updated 2 weeks ago
• advanced-security / secret-scanning-custom-patterns
  Examples of Custom Secret Scanning Patterns
  ☆150Updated 6 months ago
• advanced-security / policy-as-code
  GitHub Advanced Security Policy as Code
  ☆75Updated this week
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆249Updated last year
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆174Updated 3 months ago
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆239Updated 2 weeks ago
• github / cleanowners
  A GitHub Action to suggest removal of non-organization members from CODEOWNERS files
  ☆120Updated this week
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆287Updated last year
• sethvargo / ratchet
  A tool for securing CI/CD workflows with version pinning.
  ☆777Updated last month
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆641Updated 2 months ago
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆423Updated this week
• arnica-ext / GitGoat
  GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…
  ☆169Updated this week
• sigstore / gitsign
  Keyless Git signing using Sigstore
  ☆966Updated this week
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆151Updated last week
• microsoft / oss-ssc-framework
  Open Source Software Secure Supply Chain Framework
  ☆234Updated 2 years ago
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆145Updated this week
• anchore / scan-action
  Anchore container analysis and scan provided as a GitHub Action
  ☆223Updated this week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆243Updated last week
• step-security / wait-for-secrets
  Publish from GitHub Actions using multi-factor authentication
  ☆278Updated 3 months ago
• aquasecurity / trivy-action
  Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
  ☆861Updated last week
• anchore / sbom-action
  GitHub Action for creating software bill of materials using Syft.
  ☆175Updated 3 weeks ago
• GeekMasher / advanced-security-compliance
  GitHub Advance Security Compliance Action
  ☆132Updated 2 years ago
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆224Updated 5 months ago