Contrast Security OSS

safelog4j

Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning or upgrading

contrastscan-action

Contrast Scan GitHub action

agent-operator

A K8s operator to inject agents into existing K8s workloads.

vulnpy

Purposely-vulnerable Python functions

vulnerable-spring-boot-application

contrast-sca-action

Contrast SCA GitHub Action

NodeTestBenches

A collection of intentionally vulnerable test bench applications for testing the Contrast Security Node Agent.

contrast-teamserver-api-docs

demo-terracotta-bank

integration-verify-github-action

GitHub Action to verify an application by determining whether the application violates a job outcome policy or threshold of open vulnerabilities

demo-petclinic

CSVDLTool

CSVDLTool is a tool that can export information on vulnerabilities and libraries in CSV format.

Dependabot-Dashboard

Dependabot Dashboard fork adapted for Github Enterprise Cloud

agent-operator-images

Images of agents for the agent-operator.

Benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

contrast-documentation-rss

Contrast Documentation RSS

contrast-go-installer

install contrast-go from the command line

contrast-local-scan-action

Contrast Local Scanner Github action

helm-charts

Charts, Helm Chats everywhere!

node-route-metrics

@contrast/route-metrics records the time it takes for routes to complete and writes them to a log. Included in the package is `log-reporter` which can be used to output the logged information in various formats.

workshop-terracotta-bank

agent-operator-sample-apps

Sample apps for the Agent Operator

assess-policy-as-code

Output Contrast Assess rule policy as code

concourse-ci

Reusable Contrast Concourse CI tasks and example pipelines

contrast-hde

Scripts and utilities to manage and launch Contrast Security demo workstations in AWS

contrast-redmine-plugin

Redmine Plugin

find-package-json

Look up through directories to find package.json

migrate-users-and-groups

Migrate Contrast users and groups from one instance/organization to another

node-code-events

Create handler for v8 code events

secobs-semantic-conventions