
ci-supplychain-guard
Static analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…
code-analysiscontainer-securitydevsecops+5
28

Static analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Detects CVE-2025-55182 RCE in React Server Components by scanning npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Includes auto-fix,…

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

Static analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…