simplifi-ed/cve-2024-3094-patcherAnsible playbook that detects vulnerable xz-utils versions (5.6.0, 5.6.1) and installs a safe version to mitigate CVE-2024-3094 backdoor.
alebedev87/gatekeeper-cve-2020-8554OPA Gatekeeper constraint policy that detects and prevents Kubernetes clusters from being vulnerable to CVE-2020-8554, enforcing secure configuration.
malindarathnayake/intel-cve-2018-3639-mitigation_registryupdatePowerShell script to apply Windows registry mitigation for CVE-2018-3639 (Speculative Store Bypass), enabling automated security hardening against…
atilacastro/update-apt-packageAnsible playbook to update APT packages, addressing CVE-2019-3462 by automating patch deployment for vulnerability remediation.
controlplaneio/kubesecSecurity risk analysis for Kubernetes resources
fit2cloud/riskscannerMulti-cloud security compliance scanner using Cloud Custodian and Nuclei engines to audit resources against CIS benchmarks and vulnerability rules…
shopify/kubeauditAudits Kubernetes clusters for common security misconfigurations, including privileged containers, root filesystems, and missing AppArmor. Supports…
puppetlabs-toy-chest/puppetlabs-cve20113872Puppet Module to help fix and migrate a Puppet deployment (CVE-2011-3872)
inceptionstack/lowkeyDeploy a FullStack Prodo-Typing Agent into your AWS Account (OpenClaw, Kiro-Cli, Pi, Hermes, Claude Code, Codex)
lnfernux/log-horizonMicrosoft Sentinel SIEM Log Source Analyzer
jblaine/cookbook-bash-cve-2014-6271Chef cookbook that will fail if bash vulnerability found per CVE-2014-6271
salesforce/metabadgerPrevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
opencspm/opencspmOpen Cloud Security Posture Management Engine
synacktiv/shhAutomatically harden systemd services by generating optimal sandboxing options from strace profiling, raising security level without breaking…
nccgroup/s3_objects_checkWhitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
alegrey91/vex8sSuppress vulnerabilities applying Kubernetes context to scans
schroeder-sys/pantheon-souveraineteInfrastructure cloud modulaire, redondante et 100% souveraine pour s'affranchir des GAFAM. Guides techniques, architecture Zero-Trust et chiffrement…
maniak-academy/mitigate-cve-2023-46747Ansible playbook to automate mitigation of CVE-2023-46747 (BIG-IP unauthenticated RCE) by applying F5's official script across multiple devices.
