cvmimage
tinfoilsh/cvmimageBuilds a hermetic, reproducible confidential VM image for secure inference and custom compute on AMD SEV-SNP and Intel TDX, with auditable…
cloud-infrastructure-securitycloud-securitycontainer-security+4
28
tinfoilsh/cvmimageBuilds a hermetic, reproducible confidential VM image for secure inference and custom compute on AMD SEV-SNP and Intel TDX, with auditable…
leonlai-tw/php-eol-cve-2026-109618-109619Unofficial patches for PHP CVE-2026-109618 / CVE-2026-109619 (RCE, CVSS 9.2) on EOL platforms: PHP 7.3 on CentOS/RHEL 7 (Remi), PHP 5.4 on Amazon…
ag3ntsc4rn/autorun-auditFind code that runs without you asking: repo files that execute on folder open (VS Code tasks, agent hooks, MCP, devcontainers) and Python…
githubsecuritylab/seclab-taskflowsExample AI-agent taskflows and MCP servers for auditing source code, triaging issues, and detecting vulnerabilities across web, Android, and iOS…
0sec-labs/0Open-source AI security harness. Includes a web UI for code analysis, pentesting, vulnerability research, reverse engineering, verification, and…
sorami-consulting-au/ai-kubernetes-helm-chart-securityEvidence and data for the Sorami technical report on security defaults of 15 AI serving, vector database and MCP Helm charts on Kubernetes.
mondoohq/cnspecAn open source, cloud-native security to protect everything from build to runtime
xiaoqimikko/async-http-client-checkSelf-hosted AI workspace with agents, skills, and tools (Gmail, Calendar) that runs entirely on your own provider API keys (BYOK). Bring your own…
auditinfra-io/o1js-scanDependency-free static analyzer for zk circuit soundness bugs in o1js/Mina zkApps and Noir circuits
bomfather/agenteBPF-based Linux agent that enforces executable-level access policies in kernel space, sandboxing processes and restricting file, network, and GPU…
atomburstofficial/geigerRead-only CLI that inventories AI agents, MCP servers, plugins, and extensions on a machine, reporting their capabilities and exposure with…
offensive360/sast-scan-actionGitHub Action for Offensive360 SAST scans and SARIF results. See the open-source program for eligibility and setup.
offensive360/mcp-serverMCP server that runs SAST scans on local codebases and returns findings with severity and fixes, enabling AI assistants to perform security analysis…
pypa/advisory-databaseCommunity-owned database of security advisories for Python packages on PyPI, providing structured vulnerability data in OSV format for integration…
xiaoqimikko/spring-cvss-checkScans Java artifacts and source for Spring/Tomcat CVEs, compares vendor vs NVD CVSS scores, verifies exploitability conditions, and checks if fix…
paulorlima9/copyfail-fixQuick mitigation and patch script for CVE-2026-31431 (Copy Fail) on Ubuntu/Debian VPS
rshosting/apache-cve-2026-23918-fixUpgrade to Apache 2.4.67 to fix CVE-2026-23918 vulneribility
mlazzarotto/copy-fail-cve-2026-31431-mitigation-ansible-playbookAn Ansible Playbook to mitigate the vulnerability CVE-2026-31431 on RHEL-based and Debian-based OSes.