
python-tuf
Python reference implementation of The Update Framework (TUF)

Python reference implementation of The Update Framework (TUF)

Autonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…

A Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)

Supply-chain Levels for Software Artifacts

Signing-key abuse and update exploitation framework

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

credential isolation for AI agents. Agents never see real API keys - structural guarantee, not policy.

Multi-layer security framework for AI agent ecosystems. Provides pre-installation skill auditing, file integrity monitoring, runtime protection, and…

LlamaStack-RCE: Deterministic Supply Chain Exploitation & Hardening Framework [CVE-2024-50050] Focus on AI Security Research…

OWASP framework providing structured security capabilities for software products, derived from regulatory and industry standards analysis to guide…

A software supply chain framework powered by Nix.

Staged static taint analysis framework for GitHub Actions workflows. Detects code injection vulnerabilities using taint-tracking and an impact…

Software Component Verification Standard (SCVS)

Modular framework to detect and prevent dependency confusion attacks by analyzing package manifests across multiple sources and package management…

Anteater - CI/CD Gate Check Framework

Created after the disclosure of CVE-2022-22965 and CVE-2022-22963. Bash script that detects Spring Framework occurrences in your projects and…

Log4J Updater Bash Script to automate the framework update process on numerous machines and prevent the CVE-2021-44228