#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
tech4242/aquaman🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you…
backbay-labs/hushPortable security rules for the action boundary of AI agents
aquasecurity/trivy-plugin-aquaPlugin for integrating Trivy with Aqua Security platform to scan IaC, pipelines, and dependencies for vulnerabilities and misconfigurations.
akanthed/secureai-scanSecureAI-Scan is a CLI tool that scans TypeScript and JavaScript codebases for security issues specific to AI-powered apps — prompt injection, MCP…
pigeonlabshq/pigeonEnforce least-privilege delegation for AI agents with signed, scoped credentials. Grant sub-agents narrow capabilities and resources, verify actions…
42crunch/api-security-audit-actionAutomates static API security auditing of OpenAPI contracts in CI/CD, running 300+ checks for authentication, authorization, and data constraints,…
jas502n/database-spring-encsprint encode (plan text) get enc password
lnfernux/log-horizonMicrosoft Sentinel SIEM Log Source Analyzer
0xcyberstan/cve-2026-42533-config-scannerStatic config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture → heap…
eskatos/creadur-rat-gradleApache RAT (Release Audit Tool) Gradle Plugin
robert-auger/safer-dependenciesAutomated dependency security layer for AI coding assistants that audits packages for CVEs, typosquats, abandonment, version-age issues, and hash…
owasp/fiasseA Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)
owasp/vulnreachRuntime-aware SCA — proves which CVEs are actually reachable, not just installed.
bugbounty-site/gitsecureDetect exposed API keys on GitHub commits.
mattijsmoens/intentshieldPre-execution intent verification for AI agents. Audits what your AI is about to do, not what it says. Zero dependencies, deterministic, hash-sealed.
gensecaihq/cve-2024-3094-vulnerability-checker-fixerShell script and Ansible playbook to detect and remediate CVE-2024-3094 in xz-utils by checking package versions, upgrading or downgrading to a…
owasp/owasp-aibomOWASP project defining an AI Bill of Materials (AIBOM) standard to document AI/ML components, dependencies, and supply chain risks for AI security…
ntanwir10/guardscan100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI
