Alternatives and similar repositories for scan-action:

Users that are interested in scan-action are comparing it to the libraries listed below

• sysdiglabs / secure-inline-scan
  ☆19Updated 2 years ago
• wolfi-dev / tools
  Various tools, images, etc. to support the Wolfi OSS project
  ☆21Updated this week
• sigstore / friends
  Sigstore user stories
  ☆30Updated last year
• sysdiglabs / opa-image-scanner
  Kubernetes Admission Controller for Image Scanning using OPA
  ☆50Updated last year
• philips-labs / slsa-provenance-action
  Github Action implementation of SLSA Provenance Generation
  ☆48Updated this week
• anchore / kubernetes-admission-controller
  Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore
  ☆64Updated 2 weeks ago
• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆62Updated last week
• sigstore / sigstore-go-archived
  Go library for Sigstore signing and verification
  ☆18Updated last year
• cnabio / signy
  Go implementation for CNAB content trust verification using TUF, Notary, and in-toto
  ☆31Updated last year
• kelseyhightower / config-connector-policy-demo
  Kubernetes Config Connector Policy Demo.
  ☆25Updated 4 years ago
• feloy / kubectl-service-tree
  A kubectl plugin to explore ingresses -> services -> workloads
  ☆16Updated 4 years ago
• dlorenc / cosigned
  ☆35Updated 3 years ago
• controlplaneio / threat-modelling-zero-trust-talk
  ☆11Updated 2 years ago
• chainguard-dev / darkfiles
  Darkfiles finds orphaned files in container images and makes them to bad deeds
  ☆42Updated last year
• wolfi-dev / wolfictl
  A CLI used to work with the Wolfi OSS project
  ☆60Updated this week
• kbrew-dev / kbrew-registry
  Collection of kbrew recipes
  ☆10Updated 3 years ago
• deislabs / image-layer-provenance
  Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
  ☆43Updated last year
• chainguard-dev / hakn
  A High-Availability distribution of Knative.
  ☆20Updated last year
• chainguard-dev / policy-catalog
  ☆20Updated 9 months ago
• jetstack / letsencrypt-caa-bug-checker
  Tool to check your Kubernetes cluster for certificates affected by Let's Encrypt's CAA rechecking bug
  ☆21Updated 5 years ago
• ritazh / psp-gatekeeper-policies
  ☆32Updated 5 years ago
• rode / rode-legacy
  cloud native software supply chain ☁️🔗
  ☆63Updated 4 years ago
• onelittlenightmusic / opactl
  A simple tool for converting Rego (OPA) rule into command.
  ☆28Updated 2 years ago
• aquasecurity / starboard-octant-plugin
  Octant plugin for viewing Starboard security information
  ☆57Updated 3 years ago
• chainguard-dev / clank
  Simple tool that allows you to detect imposter commits in GitHub Actions workflows.
  ☆23Updated 4 months ago
• stefanprodan / gitops-app-distribution
  GitOps workflow for managing app delivery on multiple clusters
  ☆23Updated 5 years ago
• shelmangroup / distroless-k8s
  Kubernetes tools in a "distroless" container
  ☆13Updated last year
• developer-guy / container-image-sign-and-verify-with-cosign-and-opa
  This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)
  ☆62Updated 3 years ago
• argoproj-labs / argocd-interlace
  Enabling Software Supply Chain Security Capabilities in ArgoCD
  ☆86Updated 2 years ago
• ko-build / terraform-provider-ko
  Build and deploy Go applications with Terraform
  ☆27Updated this week