zizmor
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
cloud-securitycode-analysisdevsecops+5
6.4k
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
pypa/pip-auditAudits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
kontext-security/kontext-cliSecure agents in seconds with permissions enforced at runtime.
anchore/grypeA vulnerability scanner for container images and filesystems
prismorsec/prismorSelf-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…
secretlint/secretlintPluggable linting tool to prevent committing credential.
getsops/sopsSimple and flexible tool for managing secrets
datadog/guarddog🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages
flythenimbus/brambleLocal-first password manager with direct device-to-device sync
rezmoss/sbomlyzeGit diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.
infisical/agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
dracondev/dracon-utilitiesInvisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.
ishannaik/agent-sweepFind and redact secrets in AI coding agent histories (Claude Code, and more).
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
davidnussio/envsecSecure CLI tool for managing environment secrets using native OS credential stores (macOS Keychain, Linux Secret Service, Windows Credential Manager)