#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
snyk/agent-scanSecurity scanner for AI agents, MCP servers and agent skills.
rtvkiz/minimalMinimal CVE Hardened container image collection
mindersec/minderSoftware Supply Chain Security Platform
snyk/cliSnyk CLI scans and monitors your projects for security vulnerabilities.
cr0hn/dockerscanThe Most Comprehensive Docker Security Scanner
tech4242/aquaman🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you…
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
dependencytrack/dependency-trackIntelligent Component Analysis platform that leverages SBOMs to identify and reduce software supply chain risk through continuous vulnerability…
git-pkgs/proxyA lightweight caching proxy for package registries.
sheeki03/tirithTerminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…
asamassekou10/ship-safeThe independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…
getprobo/proboOpen source solutions for SOC2, GDPR, and ISO27001
google/osv.devOpen source vulnerability DB and triage service.
chainguard-dev/melangeCompiles source code into auditable, signed APK packages using declarative pipelines for Wolfi/Alpine, with multi-architecture QEMU emulation and…
0sec-labs/foxguardA fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits,…
rhboot/shim-reviewReviews of shim
firefart/hijaggerChecks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
