Code Analysis

mrexodia/ida-pro-mcp

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

bridgecrewio/checkov

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

pyca/cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

livecontainer/livecontainer

Run iOS apps without actually installing them!

pycqa/bandit

Bandit is a tool designed to find common security issues in Python code.

presidentbeef/brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

crytic/slither

Static Analyzer for Solidity and Vyper

securego/gosec

Go security checker

dnspyex/dnspy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

col-e/recaf

The modern Java bytecode editor

lintsinghua/deepaudit

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

pmd/pmd

An extensible multilanguage static code analyzer.

snyk/cli

Snyk CLI scans and monitors your projects for security vulnerabilities.

ossf/scorecard

OpenSSF Scorecard - Security health metrics for Open Source

awslabs/git-secrets

Prevents you from committing secrets and credentials into git repositories

pydantic/monty

A minimal, secure Python interpreter written in Rust for use by AI