DevSecOps

github/advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

ossf/scorecard

OpenSSF Scorecard - Security health metrics for Open Source

anomalyco/opencode

The open source coding agent.

owasp-noir/noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

stackrox/stackrox

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

sheeki03/tirith

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…

xddxdd/nixos-config

Lan Tian's NixOS Configuration

lore-hex/quill-router

TrustedRouter.com repo for secure LLM proxying

msaad00/agent-bom

AI supply-chain BOM: every agent, MCP server and AI package, and what each one can reach. Open-source scanner and self-hosted control plane for code,…

openai/codex-security

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm:…

infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

cloudquery/cloudquery

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from…

rtvkiz/minimal

Minimal CVE Hardened container image collection

nanocoai/nanoclaw

A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging…

firezone/firezone

WireGuard-based zero-trust access platform providing secure, peer-to-peer remote access with granular policy controls, SSO authentication, and audit…

mondoohq/cnspec

An open source, cloud-native security to protect everything from build to runtime

secretlint/secretlint

Pluggable linting tool to prevent committing credential.