dillonkirsch/cve-2026-26720-twenty-rceProof-of-concept for authenticated remote code execution in Twenty CRM via unsandboxed serverless workflow functions, allowing arbitrary Node.js…
trailofbits/semgrep-rulesCollection of Semgrep rules for static code analysis, detecting security vulnerabilities, and enforcing secure coding practices across multiple…
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
zaydmulani09/sentrymcpA static + runtime security scanner for MCP (Model Context Protocol) servers
elttam/semgrep-rulesStatic analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…
iamlucif3r/aws-key-hunter[Just for fun] Find exposed AWS keys (VALID KEYS ONLY) on github
nccgroup/vcgVisualCodeGrepper - Code security scanning tool.
d0n601/cve-2025-12135WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
synacktiv/action-octoscan📦 :octocat: A GitHub Action that performs a security scan of your GitHub Actions.
synacktiv/octoscanOctoscan is a static vulnerability scanner for GitHub action workflows.
califio/ngxrayngxray — nginx config security scanner
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
aquasecurity/trivy-actionRuns Trivy as GitHub action to scan your Docker container image for vulnerabilities
gagaltotal/cve-2026-42533-nginxCVE-2026-42533 Nginx
mrmtwoj/fix-cve-2026-60137-cve-2026-63030-in-wordpressCVE-2026-60137Temporary Emergency Mitigation for CVE-2026-60137 & CVE-2026-63030 (wp2shell)
