Secret Detection

dnszlsk/muad-dib

Real-time npm/PyPI supply-chain threat detection. Behavioral chain analysis, AST scanning, IOC feeds, and compound scoring engine.

otsmane-ahmed/ci-supplychain-guard

Static analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…

ny1024/clawguard

Modular security toolkit for autonomous agents providing static analysis, configuration auditing, runtime monitoring, and supply chain verification…

mohamed--abdel-maksoud/pisiguard

Browser extension that detects PII and sensitive data in AI chats, masks it with placeholders before sending, and restores originals in replies—all…

coinbase/salus

We would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.

xtuc/airgap

Security for the modern age of AI: defend against bad AI agents and malicious npm packages

nationwide-group-oss/cryptoptic

CodeQL-based scanner that inventories cryptographic function calls across repositories and GitHub organizations, producing a Cryptographic Bill of…

stuxctf/slythestx

Mobile app security auditing tool focused on automating SAST analysis, identifying underlying technologies (React Native, Flutter, Xamarin, native),…

zappaboy/vuln-scanner

Vulnerability Assessment Scanner with Report Generation

semonte/sisu

Mounts AWS resources as a local filesystem for infrastructure exploration, security auditing, and configuration analysis using standard Unix tools…

ustayready/mavd

Mobile Application Vulnerability Detection

gautamvarmadatla/mcpsafetywarden

Proxy server that wraps MCP servers with behavioral profiling, security scanning, risk gating, and safe execution. Detects prompt injection,…

davidnussio/envsec

Secure CLI tool for managing environment secrets using native OS credential stores (macOS Keychain, Linux Secret Service, Windows Credential Manager)

brennhill/sloppy-joe

Shields against supply-chain, slopsquatting, and typosquatting attacks from dependencies and code.

gitlab-com/gl-security/security-operations/redteam/redteam-public/tools/gitrob

This is a mirror of a forked repository. It adds several features to gitrob including GitLab support, commit content searching, in-memory repository…

koblers/np-audit

Static security analysis for npm packages. Detects obfuscated code, malicious patterns, and known vulnerabilities before installation.

rocketchat/layne

A doggo that helps look for security issues in your repositories.