#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
teycir/apihunterAsync API security scanner in Rust for CORS, CSP, GraphQL, JWT, OpenAPI, and active API posture checks.
otsmane-ahmed/ci-supplychain-guardStatic analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…
fran314/secrets-manager-rsA command-line tool for securely backing up, restoring, and verifying secrets using interoperable standards like age encryption and coreutils,…
coinbase/salusWe would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.
liamromanis101/cve-2026-31431-copy-fail---vulnerability-detection-scriptDetection script for CVE-2026-31431 (Copy Fail) that checks kernel version, patch presence, kernel configs, AF_ALG socket availability, setuid…
nightwatchcybersecurity/airflowscanChecklist and tools for increasing security of Apache Airflow
nationwide-group-oss/cryptopticCodeQL-based scanner that inventories cryptographic function calls across repositories and GitHub organizations, producing a Cryptographic Bill of…
owasp/appsec-agentA TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models.
alphacrack/readme2demoVerified tutorials and demo videos from your README. An AI agent runs it in a hardened Docker sandbox and replays it in a fresh container before…
hoppr/hoppr-copAggregates vulnerability data from multiple databases into CycloneDX SBOMs, generating deduplicated VEX, HTML, and GitLab-compatible reports for…
aquasecurity/trivy-plugin-kubectlA Trivy plugin that scans the images of a kubernetes resource
noah4ever/sshconfig-lintRule-based linter for OpenSSH client config files that detects duplicate hosts, missing identity files, weak algorithms, wildcard ordering issues,…
ustayready/outpostAWS Testing and Reporting Management Tool
bugbounty-site/gitsecureDetect exposed API keys on GitHub commits.
zappaboy/vuln-scannerVulnerability Assessment Scanner with Report Generation
helixar-ai/mcp-security-checklistMCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a…
rapticore/orenpmguardDefense Against the Shai-Hulud Supply Chain Attack
ecomtech-oss/piscPublic OCI-Image (docker image) Security Checker
