ship-safe
asamassekou10/ship-safeThe independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…
ai-securityapi-security-testingcloud-infrastructure-security+8
830
asamassekou10/ship-safeThe independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
pq-code-package/mlkem-nativeSecure, fast, and portable C90 implementation of ML-KEM / FIPS 203
appvia/kraneKubernetes RBAC static analysis & visualisation tool
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
secretlint/secretlintPluggable linting tool to prevent committing credential.
cisco-ai-defense/defenseclawSecurity Governance for Agentic AI
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
skyscanner/cfripperLibrary and CLI tool for analysing CloudFormation templates and check them for security compliance.
santhreal/keyhogOpen-source secret scanner in Rust
studiomeyer-io/mcp-stdio-shellguardDefense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security…
elttam/semgrep-rulesStatic analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
open-policy-agent/conftestWrite tests against structured configuration data using the Open Policy Agent Rego query language
rootsecdev/microburstsecretshunterScans exported Azure domain dumps for plaintext passwords, connection strings, storage keys, and other secrets; generates redacted CSV/HTML reports…
arsbr/veritensorThe Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…
megamansec/gixy-nextGixy-Next: NGINX Configuration Security Scanner & Performance Checker
makerchecker/makercheckerOpen-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…