sbassett29

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

snuffleupagus

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

PHPCompatibility

PHP Compatibility check for PHP_CodeSniffer

awesome-secure-defaults

Awesome secure by default libraries to help you eliminate bug classes!

HawkScan

Security Tool for Reconnaissance and Information Gathering on a website. (python 3.x)

shcheck

A basic tool to check security headers of a website

horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

haiti

:key: Hash type identifier (CLI & lib)

php-mock

Mock built-in PHP functions (e.g. time(), exec() or rand())

infisical

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI

WhoAmISlack

Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.

TheThing

TheThing: an open-source tool to detect DOM Clobbering vulnerabilities

renovate

Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

dive

A tool for exploring each layer in a docker image

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

glow

Render markdown on the CLI, with pizzazz! 💅🏻

taint

🚰 Static taint analysis for Go programs.

CVEAggregate

Build a CVE library with aggregated CISA, EPSS and CVSS data

semgrep-rules

HashiCorp-relevant rules for the Semgrep code analysis tool

tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

paramalyzer

Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.

DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

ccs

bats-core

Bash Automated Testing System

typer

Typer, build great CLIs. Easy to code. Based on Python type hints.

dep-scan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

phab-conventional-comments

Adds a control in Phabricator comment toolbar to insert pre-defined label in the comment textarea

packj

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

eslint-plugin-security-rules

DevSecOps

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎