JosiahOne

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Lol

Λ ⚬ λ: Functional Lattice Cryptography

CrossHair

An analysis tool for Python that blurs the line between testing and type systems.

hypothesis

Hypothesis is a powerful, flexible, and easy to use library for property-based testing.

incydr_python

Incydr Python SDK

prefect

Prefect is a workflow orchestration framework for building resilient data pipelines in Python.

saas-attacks

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

uptane

Uptane, security framework for automotive updates

macaron

Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks or check conformance to frameworks, such as SLSA.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

snyk-delta

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

narrow

Low-effort reachability analysis for third-party code vulnerabilities.

deal

🤝 Design by contract for Python. Write bug-free code. Add a few decorators, get static analysis and tests for free.

d2

D2 is a modern diagram scripting language that turns text to diagrams.

0wned

Code execution via Python package installation.

yorkshire

Yorkshire is your friend, yorkshire checks Python's requirements files for a possible dependency confusion.

LibCST

A concrete syntax tree parser and serializer library for Python that preserves many aspects of Python's abstract syntax tree

narrow

Low-effort reachability analysis for third-party code vulnerabilities.

infracost

Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left!

MuseScore

MuseScore is an open source and free music notation software. For support, contribution, bug reports, visit MuseScore.org. Fork and make pull requests!

osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

steady

Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/

s2c2f

The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously improve the S2C2F guide which outlines and defines how to securely consume Open Source Software (OSS) dependencies into the developer’s workflow.

website

cargo-license

Cargo subcommand to see license of dependencies

latexify_py

A library to generate LaTeX expression from Python code.

kata-containers

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

guac

GUAC aggregates software security metadata into a high fidelity graph database.