Tools

shoucheng3/jenkinsci__git-client-plugin_cve-2019-10392_2-8-4

Jenkins plugin providing Git APIs for automated repository operations including fetch, checkout, merge, and tag, with support for credential-based…

shoucheng3/ff4j__ff4j_cve-2022-44262_1_8_13_fixed

Feature toggle framework for Java enabling runtime feature activation, role-based access, AOP-driven toggling, monitoring, audit trails, and a web…

shoucheng3/testng-team__testng_cve-2022-4065_7-5

Java testing framework for unit, integration, and end-to-end tests with annotations, data-driven testing, and parallel execution support.

nvidia/openshell

Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…

runewardd/runeward

Governed execution cells for AI agents.

philippeabraxas-jpg/responsible-alliance-protocol

Safety cannot be a prompt instruction. TBP provides an external execution-layer boundary for autonomous agents, enforcing hard F/I/W invariants via…

owasp/riskassessmentframework

The Secure Coding Framework

adarsh14734/aegis-releases

Sandbox and MCP proxy that blocks AI coding agents from reading SSH keys, AWS credentials, and .env files, with deny-by-default policy and…

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

owasp/threat-dragon

An open source threat modeling tool from OWASP

anshumanbh/git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

ffffffff0x/f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

datadog/guarddog

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

secretlint/secretlint

Pluggable linting tool to prevent committing credential.

jonrau1/electriceye

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…

stelligent/cfn_nag

Linting tool for CloudFormation templates

hxsecurity/dongtai

Open-source Interactive Application Security Testing (IAST) tool that passively instruments Java applications to detect vulnerabilities and…