Securing the software supply chain in the cloud

• git-secrets

  32 12,013 1.0 Shell

  Prevents you from committing secrets and credentials into git repositories

  

git-secrets

• gitleaks

  35 15,225 8.2 Go

  Protect and discover secrets using Gitleaks 🔑

  

Gitleaks

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• SecretScanner

  7 2,956 7.3 Go

  :unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

  

SecretScanner

• cli

  54 4,777 9.6 TypeScript

  Snyk CLI scans and monitors your projects for security vulnerabilities. (by snyk)

  

Snyk – Scan for open-source, code, container, and Infrastructure-as-Code vulnerabilities

• trivy

  82 21,316 9.7 Go

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  

Trivy - Scan for open-source, code, container, and Infrastructure-as-Code vulnerabilities

• checkov

  54 6,512 9.9 Python

  Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

  

Chekov – Scan for open-source and Infrastructure-as-Code vulnerabilities

• kics

  13 1,896 9.9 Open Policy Agent

  Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

  

KICS – Scan for Infrastructure-as-Code vulnerabilities

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• terrascan

  22 4,494 6.9 Go

  Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

  

Terrascan - Scan for Infrastructure-as-Code vulnerabilities

• kubescape

  76 9,686 9.5 Go

  Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

  

Suggest a related project