
ci-supplychain-guard
Static analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…

Static analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…

Manage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives

☸️ The Open Testing Platform for AI-Driven Engineering Teams

Open-source cloud and AI security platform: scan code, dependencies, containers, cloud and AI agents/MCP into one security graph. Self-host free in…

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…

Let your AI go full send. Your home directory stays home.

Detects CVE-2025-55182 RCE in React Server Components by scanning npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Includes auto-fix,…

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.

Suppress vulnerabilities applying Kubernetes context to scans

Verified tutorials and demo videos from your README. An AI agent runs it in a hardened Docker sandbox and replays it in a fresh container before…

Static analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…

ClusterImagePolicy demo for cve-2022-42889 text4shell