#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
aquasecurity/vex-repo-specVEX Repository Specification
renatus-cartesius/reconswarmExtend your recon with cloud power
aquasecurity/trivy-plugin-attestPublish SBOM attestation
iulianvostrut/contexthoundStatic analysis CLI that scans codebases for LLM prompt-injection, data-exfiltration, jailbreak, and unsafe agent/tool vulnerabilities. Runs fully…
codesource/copyfail-checkArchived, moved to codesource/cve-check. Shell script to detect CVE-2026-31431 (Copy Fail) exposure and mitigations on Linux systems: kernel check,…
nu0l/nginx-riftCVE-2026-42945 NGINX 堆溢出漏洞扫描与验证工具
xiaoqimikko/spring-cvss-checkScans Java artifacts and source for Spring/Tomcat CVEs, compares vendor vs NVD CVSS scores, verifies exploitability conditions, and checks if fix…
heroku/heroku-cve-2013-0269Inspect all of your Heroku apps for vulnerable versions of the JSON gem
leitwacht/leitwachtLeitwacht control plane — runtime security for GitLab Runner CI/CD: policy authoring, multi-tenancy, audit, GitLab integration
moderneinc/rewrite-cve-2026-22732OpenRewrite recipe that detects and fixes Spring Security header suppression (CVE-2026-22732) by identifying Content-Length header misuse and…
squid-protocol1/gitgalaxyAST-free heuristic knowledge graph engine for deep repository intelligence and zero-trust security scanning. Integrates as a GitLab CI/CD component,…
knqyf263/go-mal-pkgsA security tool to detect malicious Go packages by verifying checksums in go.sum against the original source code
g0dse11/detecttraceOpen-source detection engineering tool that traces security detections end to end and identifies the first failing stage.
osmankandemir/docf-sec-checkStatic analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…
studiomeyer-io/mcp-stdio-shellguardDefense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security…
aquasecurity/trivy-module-wordpressTrivy example module for WordPress
d0rb/shellscopeDefensive exposure auditor for Plex2Shell and php2shell — find your own before they find you.
irgoncalves/f5-waf-quick-patch-cve-2021-44228This tool creates a custom signature set on F5 WAF and apply to policies in blocking mode
