#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
claranet/ansible-role-log4shellAnsible role to detect Log4Shell (CVE-2021-44228) by scanning filesystem and open files for vulnerable JAR/WAR files, reporting version and…
tayyabt/trustlockA Git-native dependency admission controller. Evaluates trust signals on every dependency change and blocks commits or builds when packages fail your…
eduardolat/authkeysync🔐 Lightweight CLI utility designed to synchronize SSH public keys from remote URLs into local authorized_keys files
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
anee769/conduitOn-prem API gateway for AI coding agents with per-engineer cost attribution, hard budgets, egress governance (secrets/entity scanning), context-rot…
tomjwxf/scopeblind-gatewaySecurity gateway for MCP servers with per-tool policy enforcement, Ed25519-signed audit receipts, and shadow-mode logging. Supports Cedar, OPA, and…
ericmtzmtz/pwnproxyAn open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.
cspf-founder/api-scanner-dockerAutomated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full …
components/dependency-scanningGenerates CycloneDX SBOMs and dependency scanning reports to identify project dependencies, licenses, and vulnerabilities within GitLab CI/CD…
giovannigatti/cve-benchA benchmark for evaluating AI agents on fixing real-world security vulnerabilities.
corelight/corelight-ansible-rolesCorelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, Suricata and…
taptap/cve-2025-59489Automated scanner that detects Unity runtime injection vulnerability CVE-2025-59489 in Android APKs by extracting Unity version and checking against…
openbreach/canopStatic analysis CLI that scans AI-generated code for vulnerabilities like SQL injection, unsafe reflection, and hardcoded secrets, with SARIF export…
rgielen/struts1filterA request parameter filter solution for Struts 1 CVE-2014-0114 based on the work of Alvaro Munoz and the HP Fortify team
projectdiscovery/httpx-actionHTTP Web Server probing
elevenpaths/atomshieldsSecurity testing framework for repositories and source code
ochebotar/copy-fail-cve-2026-31431-detection-probeSafe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead…
synacktiv/action-octoscan📦 :octocat: A GitHub Action that performs a security scan of your GitHub Actions.
