grype
anchore/grypeA vulnerability scanner for container images and filesystems
container-securitydevsecopsstatic-analysis+2
anchore/grypeA vulnerability scanner for container images and filesystems
iqtlabs/auraborealisappDo You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
datadog/guarddog🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages
murphysecurity/murphysecAn open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
visma-prodsec/confusedTool to check for dependency confusion vulnerabilities in multiple package management systems
prismorsec/prismorSelf-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…
getagentseal/agentsealSecurity toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…
backbay-labs/clawdstrikePolicy engine and EDR for AI agent fleets and developer workstations. Monitors tool calls, file access, network flows, and process execution with…
ossillate-inc/packjStatic and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…
heroku/terrierTerrier is a Image and Container analysis tool that can be used to scan Images and Containers to identify and verify the presence of specific files…
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
matheuzsecurity/elfdoor-gccLD_PRELOAD-based tool that hijacks gcc to inject malicious code into binaries during linking, enabling stealthy backdoor deployment without source…
arsbr/veritensorThe Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…
kulkansecurity/gitxrayA multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.
swelljoe/flarLightweight CLI tool that runs AI coding agents inside isolated Bubblewrap sandboxes with strict filesystem, network, and credential isolation to…
preflightsh/preflightGo-based CLI tool that scans codebases for launch readiness, detecting missing configuration, security hygiene issues, secret leaks, and integration…