hoppr-cop
hoppr/hoppr-copAggregates vulnerability data from multiple databases into CycloneDX SBOMs, generating deduplicated VEX, HTML, and GitLab-compatible reports for…
devsecopssupply-chain-securityvulnerability-analysis+1
8
hoppr/hoppr-copAggregates vulnerability data from multiple databases into CycloneDX SBOMs, generating deduplicated VEX, HTML, and GitLab-compatible reports for…
jenkinsci/nuclei-pluginNuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.
glincker/sslxA fast, modern alternative to OpenSSL's CLI - inspect, grade, and manage certificates from the terminal
kamalsrini/sentinel-cveCLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.
tayyabt/trustlockA Git-native dependency admission controller. Evaluates trust signals on every dependency change and blocks commits or builds when packages fail your…
ibondarenko1/azure-sentinel-detection-engineering9 MITRE ATT&CK-mapped KQL detections on a live Microsoft Sentinel + Defender XDR environment (control-plane, endpoint, identity), with a PR-gated…
claranet/ansible-role-log4shellAnsible role to detect Log4Shell (CVE-2021-44228) by scanning filesystem and open files for vulnerable JAR/WAR files, reporting version and…
ochebotar/copy-fail-cve-2026-31431-detection-probeSafe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead…
corelight/corelight-ansible-rolesCorelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, Suricata and…
components/dependency-scanningGenerates CycloneDX SBOMs and dependency scanning reports to identify project dependencies, licenses, and vulnerabilities within GitLab CI/CD…
aaravmaloo/reveraThe credit score for npm packages. Analyze package reputation, maintenance, security, publisher trust, and ecosystem health before you install any…
znakar/sharktoothPort Scanner with Docker & Prometheus + Grafana integration. A tool for network auditing with multithreading support and real-time monitoring.
ericmtzmtz/pwnproxyAn open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.
chef-cft/salt-vulnerabilitiesChecks for CVE-2020-11651 and CVE-2020-11652
ajf8729/blacklotusBlackLotus aka CVE-2023-24932 Detection/Remediation Scripts for Intune, ConfigMgr, and generic use
hristiy4n/bom-viewStatic web application for viewing SBOMs and performing on-demand vulnerability scanning with osv.dev. Easily deployable to GitHub/GitLab Pages.
appsec-forge/appsec-forgeStructured security knowledge base with production-inspired cases: vulnerability analysis, exploit explanation, remediation, and DevSecOps for…
gduma-phdata/patch-cve-2026-04321Patch for CVE-2026-04321, a critical OS command injection vulnerability in Zyxel firewalls. Includes deployment status and references for remediation.