ship-safe
asamassekou10/ship-safeThe independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…
ai-securityapi-security-testingcloud-infrastructure-security+8
844
asamassekou10/ship-safeThe independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…
chainguard-dev/melangeCompiles source code into auditable, signed APK packages using declarative pipelines for Wolfi/Alpine, with multi-architecture QEMU emulation and…
pantheon-security/medusaAI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an…
ossillate-inc/packjStatic and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…
logpresso/cve-2021-44228-scannerVulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
cyclonedx/cyclonedx-cliCLI for generating, analyzing, merging, diffing, validating, signing, and converting CycloneDX SBOMs across JSON, XML, Protobuf, CSV, and SPDX…
microsoft/secureboot_objectsMicrosoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…
firefart/hijaggerChecks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
visma-prodsec/confusedTool to check for dependency confusion vulnerabilities in multiple package management systems
prismorsec/prismorSelf-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…
cosai-oasis/ws4-secure-design-agentic-systemsRepository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems
aquasecurity/chain-benchAudits software supply chain security compliance against the CIS benchmark, scanning SCM settings, branch protections, dependencies, and CI/CD…
nodesecure/js-x-rayJavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
backbay-labs/clawdstrikePolicy engine and EDR for AI agent fleets and developer workstations. Monitors tool calls, file access, network flows, and process execution with…
devops-kung-fu/bomberScans Software Bill of Materials (SBOMs) for security vulnerabilities
gendigitalinc/sageLightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.
nccgroup/tpmgenieTPM Genie is an I2C bus interposer for discrete Trusted Platform Modules
git-pkgs/proxyA lightweight caching proxy for package registries.