#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
smol-machines/smolvmAn embeddable, portable, branchable virtual machine to safely run Agents locally.
google/clusterfuzzScalable fuzzing infrastructure with coverage-guided engines (libFuzzer, AFL, Honggfuzz), automated crash deduplication, bug filing, and regression…
rubenbe/opensohoLightweight OpenWRT device management platform for small networks. Centralized configuration, monitoring, and WiFi management for 2–20 devices with…
cloudquery/cloudqueryData pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from…
cloud-custodian/cloud-custodianRules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
ariesq/gh-safe-repoPython CLI that creates GitHub repos with safe defaults — branch protection, Dependabot, secret scanning, and pre-flight security scanning — applied…
anchore/syftCLI tool and library for generating a Software Bill of Materials from container images and filesystems
firelock-ai/kinSemantic graph-based version control for AI-written code. Tracks entities and relations instead of file diffs, enabling blast radius analysis, shadow…
safedep/vetProtect against malicious open source packages 🤖
owasp/docksecAI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
ostorlab/oxoModular security scanning orchestrator that combines specialized agents for vulnerability detection, reconnaissance, and fingerprinting across…
serverless/serverlessCLI framework for deploying and managing serverless applications on AWS Lambda with YAML infrastructure, local development, and multi-language…
horizon3ai/h3-cliCLI tool for the Horizon3.ai API
dnscontrol/dnscontrolInfrastructure as code for DNS!
git-pkgs/proxyA lightweight caching proxy for package registries.
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
kubescape/kubescapeOpen-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…
vicanso/pingapA reverse proxy like nginx, built on pingora, simple and efficient.
