Alternatives and similar repositories for deadshot:

Users that are interested in deadshot are comparing it to the libraries listed below

• arnica-ext / GitGoat
  GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…
  ☆169Updated this week
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆145Updated this week
• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆323Updated last year
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆249Updated last year
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆141Updated 9 months ago
• ca-risken / doc
  RISKEN is a monitoring tool for visualizing security risks.
  ☆21Updated last month
• jonrau1 / AWS-DevSecOps-Factory
  Sample DevSecOps pipelines (heavily biased on the "Sec") for various stacks and tools using open-source security tools and AWS native ser…
  ☆67Updated 3 years ago
• aquasecurity / tfsec-pr-commenter-action
  Add comments to pull requests where tfsec checks have failed
  ☆167Updated last year
• Netflix / weep
  The ConsoleMe CLI utility
  ☆324Updated 7 months ago
• 9rnt / poro
  Scan publicly accessible assets on your AWS cloud environment
  ☆139Updated 7 months ago
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆287Updated last year
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 2 years ago
• goldfiglabs / sgCheckup
  sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.
  ☆81Updated 3 years ago
• turbot / steampipe-mod-aws-perimeter
  Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrust…
  ☆107Updated 2 months ago
• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆44Updated 4 years ago
• iann0036 / gcp.permissions.cloud
  A crowdsourced Google Cloud IAM permissions reference.
  ☆20Updated 5 months ago
• hysnsec / awesome-policy-as-code
  A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
  ☆184Updated last year
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆31Updated 3 years ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆70Updated last year
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆153Updated 4 months ago
• orcasecurity / orca-toolbox
  ☆111Updated this week
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆60Updated last year
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 7 months ago
• salesforce / lobster-pot
  Scans every git push to your Github organisations to find unwanted secrets.
  ☆88Updated last year
• suzuki-shunsuke / tfprovidercheck
  CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…
  ☆78Updated this week
• lazy-actions / gitrivy
  GitHub Issue + Trivy Action
  ☆54Updated 2 years ago