#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
sda-se/cluster-image-scannerDiscover vulnerabilities and container image misconfiguration in production environments.
apiiro/combobulatorModular framework to detect and prevent dependency confusion attacks by analyzing package manifests across multiple sources and package management…
mathaix/openclawmachinesManage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives
owasp/owasp-ctf-in-a-boxSelf-hosted OWASP CTF kit: one box, one free GitHub org, no cloud dependencies
angelorc/vmsanFirecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command.
gensecaihq/react2shell-scannerDetects CVE-2025-55182 RCE in React Server Components by scanning npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Includes auto-fix,…
sayanarijit/cottageA modern git based age-encrypted secrets manager for teams.
sshwarts/skillscriptSkillscript — a small declarative language for authoring agent workflows. Runtime, compiler, and CLI.
brumbelow/layerleaklayerleak the Docker Hub Secret Scanner
izar/pytmA Pythonic framework for threat modeling
rohansx/wardncredential isolation for AI agents. Agents never see real API keys - structural guarantee, not policy.
speytech/c-sentinelSemantic Observability for UNIX Systems - A lightweight C-based system prober with AI-powered analysis
owasp/pscfOWASP framework providing structured security capabilities for software products, derived from regulatory and industry standards analysis to guide…
dmdhrumilmistry/security-harnessMulti-agent static application-security review harness for AI coding agents: maps codebases, hunts vulnerability classes, chains and verifies…
dtact/divd-2021-00038--log4j-scannerRecursive vulnerability scanner for Log4j CVEs in archives and Docker images. Detects JndiLookup.class and vulnerable versions via SHA256 hashes,…
ariesq/gh-safe-repoPython CLI that creates GitHub repos with safe defaults — branch protection, Dependabot, secret scanning, and pre-flight security scanning — applied…
aquasecurity/trivy-repodeb/rpm repository for Trivy
owasp/application-security-curriculumStructured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…
