Tools

otsmane-ahmed/ci-supplychain-guard

Static analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…

wagoodman/dive

A tool for exploring each layer in a docker image

mathaix/openclawmachines

Manage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives

dockersecurityplayground/dsp

A Microservices-based framework for the study of Network Security and Penetration Test techniques

kubeshop/testkube

☸️ The Open Testing Platform for AI-Driven Engineering Teams

msaad00/agent-bom

Open-source cloud and AI security platform: scan code, dependencies, containers, cloud and AI agents/MCP into one security graph. Self-host free in…

zupit/horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

cdxgen/cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…

provos/ironcurtain

A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)

finbarr/yolobox

Let your AI go full send. Your home directory stays home.

gensecaihq/react2shell-scanner

Detects CVE-2025-55182 RCE in React Server Components by scanning npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Includes auto-fix,…

aquasecurity/trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

kstenerud/yoloai

Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.

alegrey91/vex8s

Suppress vulnerabilities applying Kubernetes context to scans

controlplaneio/simulator

Kubernetes Security Training Platform - focusing on security mitigation

alphacrack/readme2demo

Verified tutorials and demo videos from your README. An AI agent runs it in a hardened Docker sandbox and replays it in a fresh container before…

osmankandemir/docf-sec-check

Static analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…