#1Dependency scanning, SBOM generation, package integrity, and supply chain risk tools.
Kitploit recommended
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
wolfssl/wolfsslThe wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS…
hotcakex/harden-windows-securityHarden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build…
microsoft/applicationinspectorA source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using…
lirantal/awesome-nodejs-securityCurated directory of Node.js security tools, static analyzers, vulnerability scanners, and educational resources covering OWASP Top 10, supply chain…
gadievron/raptorAutonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…
ottosulin/awesome-ai-securityA collection of awesome resources related AI security
agwa/git-cryptTransparent file encryption in git
nolabs-ai/nonosecure multiplexed execution paths for agents - zero trust, zero setup, zero latency.
google/osv.devOpen source vulnerability DB and triage service.
perplexityai/bumblebeeRead-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software…
moltis-org/moltisA secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord,…
snyk/agent-scanSecurity scanner for AI agents, MCP servers and agent skills.
slsa-framework/slsaSupply-chain Levels for Software Artifacts
cisco-ai-defense/skill-scannerSecurity Scanner for Agent Skills
pyupio/safetySafety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
jedisct1/minisignA dead simple tool to sign files and verify digital signatures.
theupdateframework/python-tufPython reference implementation of The Update Framework (TUF)
