#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
emicoecommerce/magento-apsb22-48-security-patchesThis repository contains potential security patches for the Magento APSB22-48 and CVE-2022-35698 security vulnerability
aquasecurity/vexhubAggregates Vulnerability Exploitability eXchange (VEX) documents from open-source projects. Organizes by PURL for automated security tool integration.
asteroid-belt/skultoOffline and security-first tool for syncing and managing agent skills
opensourcemalware/vercel-april2026-incident-responseThis is an incident response playbook we created for the Vercel April 2026 compromise
platanor/hardware-compliance-handbookAI-ready knowledge base of security & compliance regulations for hardware and connected-device manufacturers - structured, indexed, and…
brennhill/sloppy-joeShields against supply-chain, slopsquatting, and typosquatting attacks from dependencies and code.
codeshield-security/log4jshell-bytecode-detectorLocal Bytecode Scanner for the Log4JShell Vulnerability (CVE-2021-44228)
tech4242/aquaman🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you…
rezmoss/sbomlyzeGit diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.
makerchecker/makercheckerOpen-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…
ariary/trojansourcefinder🔎 Help find Trojan Source vulnerability in code 👀 . Useful for code review in project with multiple collaborators (CI/CD)
backbay-labs/hushPortable security rules for the action boundary of AI agents
1lann/log4shelldetectRapidly scan filesystems for Java programs potentially vulnerable to Log4Shell (CVE-2021-44228) or "that Log4j JNDI exploit" by inspecting the class…
akanthed/secureai-scanSecureAI-Scan is a CLI tool that scans TypeScript and JavaScript codebases for security issues specific to AI-powered apps — prompt injection, MCP…
aquasecurity/trivy-plugin-aquaPlugin for integrating Trivy with Aqua Security platform to scan IaC, pipelines, and dependencies for vulnerabilities and misconfigurations.
hynekpetrak/log4shell-finderFastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305,…
saint0x/fzya systems programming language prioritizing verifiable correctness, determinism, and performance
morpheuslord/startup-sbomA tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and CVE.
