kube-score
zegl/kube-scoreStatic code analysis tool for Kubernetes object definitions that scores YAML/Helm charts for security, reliability, and best practices, with CI/CD…
cloud-securityconfiguration-auditingcontainer-security+4
3.1k
zegl/kube-scoreStatic code analysis tool for Kubernetes object definitions that scores YAML/Helm charts for security, reliability, and best practices, with CI/CD…
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
openai/codex-securityAI-powered static code analysis tool (CLI + SDK) for discovering security vulnerabilities, validating findings, and generating patches. Supports…
securego/gosecStatic analysis tool that inspects Go source code for security vulnerabilities using AST, SSA, and taint analysis, with CI/CD integration and CWE…
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
aquasecurity/tfsecStatic analysis tool for Terraform code that detects potential security misconfigurations across major cloud providers, with hundreds of built-in…
david-a-wheeler/flawfindera static analysis tool for finding vulnerabilities in C/C++ source code
batfish/pybatfishPython client for Batfish, a network configuration analysis tool that validates security, reliability, and compliance by modeling network behavior…
ossillate-inc/packjStatic and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…
mhaskar/bughoundStatic code analysis tool based on Elasticsearch
avito-tech/deepsecretsStatic analysis tool that scans source code for hardcoded secrets, API keys, and credentials using semantic understanding of code context.
arsbr/veritensorThe Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…
momenbasel/malware-checkStatic and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations
tejasprasad2008-afk/tracetreeRuntime behavioral analysis tool that sandboxes suspicious packages in Docker, traces syscalls with strace, maps process cascades into directed…
coffeeandsecurity/dakshscraFramework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…
otsmane-ahmed/ci-supplychain-guardStatic analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…
osmankandemir/docf-sec-checkStatic analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…