#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
praetorian-inc/noseyparkerNosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.
playtikaoss/leaktopusAutomated secret and leak detection scanner for GitHub and paste sites, with heuristic filtering, IOL enrichment via Shhgit/TruffleHog, and ELK-based…
fluidattacks/makesA software supply chain framework powered by Nix.
rootlug/auraProject Aura: Security auditing and code introspection
shopify/kubeauditkubeaudit helps you audit your Kubernetes clusters against common security controls
warhorse/warhorseInfrastructure Automation
reposaur/reposaurOpen source compliance tool for development platforms.
openclarity/kubeclarityKubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems
skyscanner/whispersIdentify hardcoded secrets in static structured text
stacscan/stacsStatic Token And Credential Scanner
praetorian-inc/gokartA static analysis tool for securing Go code
opencspm/opencspmOpen Cloud Security Posture Management Engine
microsoft/onefuzzA self-hosted Fuzzing-As-A-Service platform
anchore/anchore-engineA service that analyzes docker images and scans for vulnerabilities
octarinesec/kube-scankube-scan: Octarine k8s cluster risk assessment tool
owasp/riskassessmentframeworkThe Secure Coding Framework
