ashishkurmi

ashishkurmi's Stars

• boostsecurityio/poutine

  boostsecurityio/poutine

  Language:Go22622

• step-security/agent

  Purpose-built security agent for hosted runners

  Language:Go2918

• philips-labs/terraform-aws-github-runner

  Terraform module for scalable GitHub action runners on AWS

  Language:HCL2.6k619

• cilium/tetragon

  eBPF-based Security Observability and Runtime Enforcement

  Language:Go3.6k359

• step-security/ai-codewise

  AI-Powered Code Reviews for Best Practices & Security Issues Across Languages

  Language:Go167

• ossf/scorecard-monitor

  Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts

  Language:JavaScript3213

• oracle/macaron

  Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:

  Language:Python13322

• levoai/levoai-burp-extension

  Build OpenApi specs for your APIs from Burp's traffic using Levo.ai. Also detect the PII in your APIs.

  Language:Java244

• step-security/harden-runner

  Network egress filtering and runtime security for GitHub-hosted and self-hosted runners

  Language:TypeScript61250

• step-security/wait-for-secrets

  Publish from GitHub Actions using multi-factor authentication

  Language:TypeScript27617

• step-security/secure-repo

  Orchestrate GitHub Actions Security

  Language:Go25641

• step-security/github-actions-goat

  GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

  Language:JavaScript437252