
trajan
A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Peer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

PHP Static Analysis Tool - discover bugs in your code without running it!

Pluggable linting tool to prevent committing credential.

🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your…

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Static analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…

Layer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends…

PHP 8.4+ security library (mirror)

A security focused static analysis tool for Android and Java applications.

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

🧬 Extract and analyze contributors info from git repos

Bandit is a tool designed to find common security issues in Python code.

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation