cdxgen
cdxgen/cdxgenCreates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…
ai-securitycloud-securityconfiguration-auditing+6
1.1k
cdxgen/cdxgenCreates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…
ivankovic/stop-botsAutomate stopping bad bots from accessing your server
aquasecurity/trivy-actionRuns Trivy as GitHub action to scan your Docker container image for vulnerabilities
provos/ironcurtainA secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
gensecaihq/react2shell-scannerDetects CVE-2025-55182 RCE in React Server Components by scanning npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Includes auto-fix,…
finbarr/yoloboxLet your AI go full send. Your home directory stays home.
otsmane-ahmed/ci-supplychain-guardStatic analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…
alegrey91/vex8sSuppress vulnerabilities applying Kubernetes context to scans
msaad00/agent-bomOpen-source cloud and AI security platform: scan code, dependencies, containers, cloud and AI agents/MCP into one security graph. Self-host free in…
mathaix/openclawmachinesManage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives
alphacrack/readme2demoVerified tutorials and demo videos from your README. An AI agent runs it in a hardened Docker sandbox and replays it in a fresh container before…
kstenerud/yoloaiYour agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.
zupit/horusecHorusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
kubeshop/testkube☸️ The Open Testing Platform for AI-Driven Engineering Teams
dockersecurityplayground/dspA Microservices-based framework for the study of Network Security and Penetration Test techniques
controlplaneio/simulatorKubernetes Security Training Platform - focusing on security mitigation
osmankandemir/docf-sec-checkStatic analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…
wagoodman/diveA tool for exploring each layer in a docker image