Alternatives and similar repositories for ToBeReviewedBot

Users that are interested in ToBeReviewedBot are comparing it to the libraries listed below

• chainguard-dev / justtrustme
  ☆57Updated last week
• stacklok / frizbee
  Throw a tag at it and it comes back with a checksum.
  ☆153Updated this week
• cashapp / pivit
  ☆99Updated 4 months ago
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆301Updated this week
• google / magic-github-proxy
  An access-limiting stateless GitHub API Proxy
  ☆150Updated 3 years ago
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆251Updated 2 years ago
• octo-sts / action
  ☆51Updated last month
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆305Updated 2 months ago
• Snowflake-Labs / sansshell
  A non-interactive daemon for host management
  ☆120Updated last month
• chainguard-dev / darkfiles
  Darkfiles finds orphaned files in container images and makes them to bad deeds
  ☆42Updated 2 years ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆55Updated 2 years ago
• tailscale / security-policies
  Security policies for Tailscale
  ☆307Updated 2 weeks ago
• digitalocean-labs / terraform-vault-github-oidc
  Terraform module to configure Vault for GitHub OIDC authentication from Action runners.
  ☆29Updated last year
• slsa-framework / slsa-github-generator-go
  ☆58Updated 3 years ago
• slsa-framework / github-actions-demo
  Proof-of-concept SLSA provenance generator for GitHub Actions
  ☆100Updated 3 years ago
• flipt-io / cup
  Git Contribution Automation
  ☆77Updated last year
• jetstack / paranoia
  Inspect certificate authorities in container images
  ☆240Updated last month
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆45Updated 2 years ago
• chainguard-dev / crow-registry
  ☆26Updated 2 years ago
• ConductorOne / baton
  Identity governance for any SaaS, infrastructure, or tool
  ☆94Updated this week
• darkbitio / gcp-iam-role-permissions
  Exports primitive and predefined GCP IAM Roles and their permissions
  ☆110Updated last week
• turbot / steampipe-plugin-gcp
  Use SQL to instantly query GCP resources across regions, projects and organizations. Open source CLI. No DB required.
  ☆44Updated last week
• mmmorris1975 / ssm-session-client
  A golang implementation of the protocol used with AWS SSM sessions
  ☆55Updated 2 months ago
• square / spiffe-aws-assume-role
  This tool allows using a SPIFFE JWT to authenticate to AWS APIs
  ☆35Updated last month
• cloudflare / har-sanitizer
  ☆236Updated 2 weeks ago
• google / localtoast
  ☆115Updated 5 months ago
• hashicorp / copywrite
  Automate copyright headers and license files at scale
  ☆104Updated this week
• superfly / ssokenizer
  ☆119Updated last month
• aidansteele / jwtex
  A serverless JWT exchanger and OIDC IdP
  ☆32Updated 2 years ago
• suzuki-shunsuke / tfprovidercheck
  CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…
  ☆88Updated this week