Alternatives and similar repositories for deadshot

Users that are interested in deadshot are comparing it to the libraries listed below

• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆286Updated last year
• github / audit-actions-workflow-runs
  Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded
  ☆69Updated this week
• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆330Updated 2 months ago
• arnica-ext / GitGoat
  GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…
  ☆170Updated 5 months ago
• rung / training-devenv-security
  Hands-on Exercises for "Dangerous attack paths: Modern Development Environment Security - Devices and CI/CD pipelines"
  ☆45Updated 2 years ago
• aquasecurity / cfsec
  Static analysis for CloudFormation templates to identify common misconfiguration
  ☆57Updated 3 years ago
• salesforce / lobster-pot
  Scans every git push to your Github organisations to find unwanted secrets.
  ☆87Updated 2 months ago
• m-mizutani / octovy
  Trivy based vulnerability management service
  ☆55Updated 4 months ago
• Netflix / weep
  The ConsoleMe CLI utility
  ☆333Updated last year
• aquasecurity / tfsec-pr-commenter-action
  Add comments to pull requests where tfsec checks have failed
  ☆169Updated last year
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆755Updated last year
• ovotech / gitoops
  all paths lead to clouds
  ☆638Updated last year
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆250Updated 2 years ago
• snyk-labs / github-actions-scanner
  Scans your Github Actions for security issues
  ☆77Updated this week
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆143Updated 2 months ago
• Open-Source-Security-Coalition / Open-Source-Security-Coalition
  ☆40Updated 5 years ago
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated 10 months ago
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• turbot / steampipe-mod-aws-perimeter
  Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrust…
  ☆111Updated this week
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆101Updated last year
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆205Updated last week
• iann0036 / gcp.permissions.cloud
  A crowdsourced Google Cloud IAM permissions reference.
  ☆24Updated this week
• google / localtoast
  ☆113Updated this week
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• aquasecurity / defsec
  Trivy's misconfiguration scanning engine
  ☆218Updated 5 months ago
• goldfiglabs / sgCheckup
  sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.
  ☆81Updated 3 years ago
• hysnsec / awesome-policy-as-code
  A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
  ☆192Updated last year
• marcin-kolda / gcp-iam-collector
  Python script for collecting and visualising Google Cloud Platform IAM permissions
  ☆50Updated 8 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 4 months ago