Alternatives and similar repositories for ToBeReviewedBot

Users that are interested in ToBeReviewedBot are comparing it to the libraries listed below

• cashapp / pivit
  ☆100Updated 4 months ago
• google / magic-github-proxy
  An access-limiting stateless GitHub API Proxy
  ☆149Updated 3 years ago
• chainguard-dev / justtrustme
  ☆56Updated 2 weeks ago
• stacklok / frizbee
  Throw a tag at it and it comes back with a checksum.
  ☆150Updated this week
• octo-sts / action
  ☆46Updated last week
• tailscale / security-policies
  Security policies for Tailscale
  ☆300Updated 4 months ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆220Updated last week
• slsa-framework / slsa-github-generator-go
  ☆57Updated 3 years ago
• slsa-framework / github-actions-demo
  Proof-of-concept SLSA provenance generator for GitHub Actions
  ☆100Updated 2 years ago
• chainguard-dev / darkfiles
  Darkfiles finds orphaned files in container images and makes them to bad deeds
  ☆42Updated 2 years ago
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆281Updated last month
• aidansteele / jwtex
  A serverless JWT exchanger and OIDC IdP
  ☆32Updated last year
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆252Updated 2 years ago
• ConductorOne / baton
  Identity governance for any SaaS, infrastructure, or tool
  ☆86Updated 4 months ago
• cloudflare / har-sanitizer
  ☆216Updated 11 months ago
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆45Updated 2 years ago
• chainguard-dev / crow-registry
  ☆24Updated 2 years ago
• jetstack / paranoia
  Inspect certificate authorities in container images
  ☆236Updated this week
• Snowflake-Labs / sansshell
  A non-interactive daemon for host management
  ☆113Updated this week
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• digitalocean-labs / terraform-vault-github-oidc
  Terraform module to configure Vault for GitHub OIDC authentication from Action runners.
  ☆30Updated last year
• glassechidna / kms-host-key
  An easy way to give all your EC2 instances SSH host certificates
  ☆16Updated 2 years ago
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆288Updated last year
• sigstore / friends
  Sigstore user stories
  ☆30Updated 2 years ago
• elastic / harp
  Secret management by contract toolchain
  ☆152Updated 2 weeks ago
• darkbitio / gcp-iam-role-permissions
  Exports primitive and predefined GCP IAM Roles and their permissions
  ☆109Updated last week
• in-toto / demo
  Securing Alice's, Bob's and Carl's software supply chain using in-toto
  ☆94Updated last week
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆60Updated 2 years ago
• github / artifact-attestations-helm-charts
  Helm charts for verifying artifact attestations in Kubernetes
  ☆18Updated this week