pritchyspritch

.github

Alphagov organisation health files

active-cve-check

Script to automate the tasks of downloading packages from multiple machines via a jumpbox then check the packages list against the ubuntu-cve-tracker with some useful text and links for pasting into a report

censys-search

cloudwatch-script

composite-consume

composite-test

cyber-security-nessus

Old copy of CO project after it was made private (some missing code changes)

cyber-security-security-advisory-dashboard

A web dashboard surfacing the state of github security advisories across our estate

cyber_splunk_search

A simple python client to send queries to your splunk rest api

ecr-scanner

A script for downloading AWS ECR container images and scanning them with Trivy.

ghastoolkit

GitHub Advanced Security Python Toolkit

graphqling

A repo I can use to test the GitHub graphql api

pritchyspritch.github.io

reusable-workflows

dfe-digital-.github

DfE community health files. These will propagate to all repos within the DfE organisation

policy-as-code

GitHub Advanced Security Policy as Code

run-threagile-action

GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secret-scanning-custom-patterns

Examples of Custom Secret Scanning Patterns

service-security-posture-hardening

stackhawk-custom-image

🐋 Customize your own StackHawk docker images

tech-docs-gem

Gem to distribute the tech docs project

verify-event-recorder-service

This service is part of Verify's event recording system; its purpose is to read events from a queue and write them to a permanent datastore.

workflow-templates