sbassett29

dive

A tool for exploring each layer in a docker image

renovate

Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

glow

Render markdown on the CLI, with pizzazz! 💅🏻

typer

Typer, build great CLIs. Easy to code. Based on Python type hints.

infisical

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

bats-core

Bash Automated Testing System

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

PHPCompatibility

PHP Compatibility check for PHP_CodeSniffer

DevSecOps

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

dep-scan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

snuffleupagus

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

haiti

:key: Hash type identifier (CLI & lib)

awesome-secure-defaults

Awesome secure by default libraries to help you eliminate bug classes!

packj

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

shcheck

A basic tool to check security headers of a website

tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

HawkScan

Security Tool for Reconnaissance and Information Gathering on a website. (python 3.x)

php-mock

Mock built-in PHP functions (e.g. time(), exec() or rand())

ccs

taint

🚰 Static taint analysis for Go programs.

semgrep-rules

HashiCorp-relevant rules for the Semgrep code analysis tool

TheThing

TheThing: an open-source tool to detect DOM Clobbering vulnerabilities

WhoAmISlack

Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.

paramalyzer

Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.

CVEAggregate

Build a CVE library with aggregated CISA, EPSS and CVSS data

eslint-plugin-security-rules

phab-conventional-comments

Adds a control in Phabricator comment toolbar to insert pre-defined label in the comment textarea