chasemp

anybadge

A Python project for generating badges for your projects, with a focus on simplicity and flexibility.

markdown-to-confluence

Syncs Markdown files to Confluence

ssc-reading-list

A reading list for software supply-chain security.

seasponge

:pineapple: SeaSponge is an accessible threat modelling tool from Mozilla

cement

Application Framework for Python

drawio-threatmodeling

Draw.io libraries for threat modeling diagrams

threat-model-cookbook

This project is about creating and publishing threat model examples.

scorecard

OpenSSF Scorecard - Security health metrics for Open Source

frsca

cis-docker-benchmark

CIS Docker Benchmark - InSpec Profile

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

DeadlinkChecker

Code to determine if a link on the web is dead or alive

keda

KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes

awesome-security-newsletters

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

aws-customer-security-incidents

A repository of breaches of AWS customers

bom

A utility to generate SPDX-compliant Bill of Materials manifests

balanced-employee-ip-agreement

GitHub's employee intellectual property agreement, open sourced and reusable

LicenseFinder

Find licenses for your project's dependencies.

ort

A suite of tools to automate software compliance checks.

threat-matrix-cicd

Threat matrix for CI/CD Pipeline

HtmlSanitizer

Cleans HTML to avoid XSS attacks

poetry

Python packaging and dependency management made easy

pyenv

Simple Python version management

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

ohmyzsh

🙃 A delightful community-driven (with 2,300+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

markdown-diagrams-browser-extension

A browser extension for Chrome, Edge, Opera and Firefox that renders markdown diagrams and charts code blocks into preview images.

mermaid-cli

Command line tool for the Mermaid library

ripgrep

ripgrep recursively searches directories for a regex pattern while respecting your gitignore

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.