#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
offensive360/sast-scan-actionGitHub Action for Offensive360 SAST scans and SARIF results. See the open-source program for eligibility and setup.
lgranadoi/sift-hardenedSecurity-hardened fork of sift 17.1.3 for CVE-2026-85625. Not affiliated with crcn/sift.js.
soemoescode/guardskillRead-only scanner for what lets a repository run code in a coding agent (Claude Code, Codex, Cursor, Copilot): git settings, hooks, and committed MCP…
xiaoqimikko/netty-http-checkOffline Java tool that scans application jars to determine exposure to 14 Netty codec-http CVEs, identifying the exact patched version…
asteroid-belt/skultoOffline and security-first tool for syncing and managing agent skills
disrex-group/stylesmuggler-adobe-patchescomposer require delivery of Adobe's official APSB26-146 (CVE-2026-75650) fix for Magento, via cweagans/composer-patches. Auto-selects the patch for…
safeagent-beihang/clawguardEnterprise AI agent security toolkit providing pre-flight auditing, configuration hardening, runtime threat detection, and active defense against…
mhicairo-hue/cs50-cybersecurity-final-projectTechnical analysis of the XZ Utils backdoor (CVE-2024-3094), explaining the supply chain attack, obfuscation techniques, and impact on OpenSSH via…
pvharmo2/gha-lab-00d54c717dSecurity-research lab: CVE-2026-47172 (workflow_run pwn request in deploy.yaml) — flattened snapshot of duck-organization/questbot at 1903b2f
geeksikhsecurity/ai-tool-poisoning-guardFree security-baseline rule for Claude Code, Codex, and Cursor: treats MCP tool descriptions as untrusted input (OWASP MCP Top 10 MCP03,…
pvharmo2/gha-lab-5511dc3f73Authorized security-research lab reproducing CVE-2026-45131 (pwn request in .github/workflows/pull-request.yaml) — snapshot of…
pvharmo2/gha-lab-8aba6b05dcSecurity-research lab reproducing CVE-2026-45132 (pwn request via pull_request_target chart-name injection in generate-schema.yaml) — snapshot of…
pvharmo2/gha-lab-5bce203f66Security-research lab: reproduction of CVE-2026-41249 (GHSA-q58j-g3f4-h26h) — pull_request_target pwn request in .github/workflows/static.yml,…
pvharmo2/gha-lab-456dd8a245Security-research lab reproducing CVE-2026-41414 (pull_request_target pwn in .github/workflows/pr.yml) — snapshot of skim-rs/skim @ ca986f4, not a…
xiaoqimikko/netty-http2-checkOffline Java tool that scans jars and versions to determine exposure to seven netty-codec-http2 CVEs, recommending the single patched version that…
pypa/advisory-databaseCommunity-owned database of security advisories for Python packages on PyPI, providing structured vulnerability data in OSV format for integration…
pvharmo2/gha-lab-3f1ff30e9cAuthorized security-research lab reproducing CVE-2026-31852 (jellyfin/jellyfin-ios pull_request_target pwn in code-quality.yml) — isolated snapshot,…
pvharmo2/gha-lab-ca4fa82ac5Security-research lab: reproduction of CVE-2026-29075 (GHSA-3j55-5q6x-2h48) in mesa/mesa benchmarks.yml pull_request_target workflow — single-commit…
