Alternatives and similar repositories for deadshot

Users that are interested in deadshot are comparing it to the libraries listed below

• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆329Updated 2 weeks ago
• reposaur / reposaur
  Open source compliance tool for development platforms.
  ☆286Updated last year
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆249Updated 2 years ago
• salesforce / lobster-pot
  Scans every git push to your Github organisations to find unwanted secrets.
  ☆87Updated last week
• hysnsec / awesome-policy-as-code
  A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
  ☆190Updated last year
• aquasecurity / tfsec-pr-commenter-action
  Add comments to pull requests where tfsec checks have failed
  ☆167Updated last year
• ca-risken / doc
  RISKEN is a monitoring tool for visualizing security risks.
  ☆21Updated last week
• arnica-ext / GitGoat
  GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…
  ☆170Updated 3 months ago
• turbot / steampipe-mod-aws-perimeter
  Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrust…
  ☆111Updated last week
• snyk-labs / github-actions-scanner
  Scans your Github Actions for security issues
  ☆70Updated this week
• triat / terraform-security-scan
  Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec
  ☆112Updated 7 months ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆143Updated last week
• octo-sts / app
  A GitHub App that acts like a Security Token Service (STS) for the Github API
  ☆189Updated this week
• ovotech / gitoops
  all paths lead to clouds
  ☆638Updated last year
• aquasecurity / appshield
  Security configuration checks for popular cloud native applications and infrastructure.
  ☆118Updated 3 years ago
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆155Updated 8 months ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• rung / training-devenv-security
  Hands-on Exercises for "Dangerous attack paths: Modern Development Environment Security - Devices and CI/CD pipelines"
  ☆44Updated 2 years ago
• Cigna / confectionery
  A library of rules for Conftest used to detect misconfigurations within Terraform configuration files
  ☆191Updated 2 years ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated last year
• google / localtoast
  ☆112Updated 4 months ago
• salesforce / cloud-guardrails
  Rapidly apply hundreds of security controls in Azure
  ☆184Updated last week
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 2 months ago
• lazy-actions / gitrivy
  GitHub Issue + Trivy Action
  ☆55Updated 2 years ago
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 3 years ago
• github / audit-actions-workflow-runs
  Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded
  ☆64Updated 2 weeks ago
• mazen160 / tfquery
  tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
  ☆325Updated 2 years ago
• Open-Source-Security-Coalition / Open-Source-Security-Coalition
  ☆39Updated 4 years ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆427Updated last week
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆339Updated 3 years ago