Tools

cybergabisoft/ctwall

CTWall (ChainThreatWall) platform helps Security, DevOps, and Product teams make risk decisions faster by using SBOM/BOM data to identify malware in…

aquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

roxanne_ardary/aurea

Aurea is an open-source, AI-powered platform that secures infrastructure-as-code (IaC) across Terraform, Kubernetes, Docker, and Ansible. It…

maweil/bidi_char_detector

Checks your files for existence of Unicode BIDI characters which can be misused for supply chain attacks. See CVE-2021-42574

crazycatmyopic/cve

Docker Deskop giving issue CVE-2024-26308 for maven [reproduce]

gouldnicholas/cve-2026-5817-poc

Docker Model Runner container-to-host RCE / Escape: A critical vulnerability that allows for container-to-host code execution in the Docker Model…

ecomtech-oss/pisc

Public OCI-Image (docker image) Security Checker

aquasecurity/trivy-enforcer

[EXPERIMENTAL] Kubernetes Operator for Image Assurance

microsoft/azurelinux

Hardened, Azure-optimized Linux distribution built from Fedora sources with RPM packaging, supply chain security, and declarative configuration for…

nolabs-ai/nono

safe execution paths for agents - zero trust, zero setup, zero latency.

santhreal/keyhog

Open-source secret scanner in Rust

anchore/grype

A vulnerability scanner for container images and filesystems

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

prismorsec/prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…