gitleaks
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
code-analysisdevsecopssecret-detection+3
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
otsmane-ahmed/ci-supplychain-guardStatic analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…
alexpena5635/cve-2021-44228_scanner-main-modified-Scans jar, war, and ear files for the presence of JndiLookup.class to detect applications vulnerable to CVE-2021-44228 (Log4Shell).
cycodelabs/ravenScans GitHub Actions CI/CD workflows for security vulnerabilities, indexes findings into a Neo4j graph database, and provides a query library for…
nvidia/skillspectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…
firefart/hijaggerChecks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
swelljoe/flarLightweight CLI tool that runs AI coding agents inside isolated Bubblewrap sandboxes with strict filesystem, network, and credential isolation to…
preflightsh/preflightGo-based CLI tool that scans codebases for launch readiness, detecting missing configuration, security hygiene issues, secret leaks, and integration…
oxsecurity/codetotalAnalyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security,…
oways/react2shell-cve-2025-55182-checkerPassive CVE-2025-55182 detection tool for vulnerable React Server Components. Scans package.json, JavaScript bundles, HTTP headers, and API endpoints…
devjanger/cve-2024-3094-xz-backdoor-detectorShell script to detect the CVE-2024-3094 backdoor in XZ Utils by checking for malicious code in liblzma build artifacts and identifying affected…
murphysecurity/murphysecAn open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
pypa/pip-auditAudits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
aquasecurity/chain-benchAudits software supply chain security compliance against the CIS benchmark, scanning SCM settings, branch protections, dependencies, and CI/CD…
synacktiv/depfuzzerScans project dependencies for dependency confusion vulnerabilities and checks package owner email takeover risks across multiple registries (npm,…
az9713/cve-lite-on-piRunning OWASP cve-lite-cli against the pi monorepo: scan journey and key finding (vitest CVE-2026-47429).
atiilla/cve-2026-21852-pocEducational demo of three Claude Code vulnerabilities (hooks bypass, MCP injection, API key exfiltration) with attacker server, MITM proxy, and…
s1ko/cve-2026-52617Advisory and proof-of-concept for OS command injection in an MCP ffmpeg helper, with root-cause analysis, detector guidance, and mitigations for an…