xopham

LazyVim

Neovim config for the lazy

infisical

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

fq

jq for binary formats - tool, language and decoders for working with binary and text formats

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

jnv

Interactive JSON filter using jq

tracee

Linux Runtime Security and Forensics using eBPF

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

peirates

Peirates - Kubernetes Penetration Testing tool

metadata-action

GitHub Action to extract metadata (tags, labels) from Git reference and GitHub events for Docker

KubeHound

Tool for building Kubernetes attack paths

awesome-secure-defaults

Awesome secure by default libraries to help you eliminate bug classes!

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

kdigger

Kubernetes focused container assessment and context discovery tool for penetration testing

gram

Gram is Klarna's own threat model diagramming tool

actions-permissions

GitHub token permissions Monitor and Advisor actions

minder

Software Supply Chain Security Platform

frsca

scan-action

Anchore container analysis and scan provided as a GitHub Action

sbom-action

GitHub Action for creating software bill of materials using Syft.

TeamsEnum

User Enumeration of Microsoft Teams users via API

checkpointctl

A tool for in-depth analysis of container checkpoints

CBOM

Cryptography Bill of Materials

age-online

a fully in-browser tool to encrypt data with the age encryption tool.

attache

Attaché provides an emulation layer for Cloud Provider IMDS APIs

psl-dns

Query the Public Suffix List (PSL) via DNS and check the PSL status of a domain.

semgr8s

Semgrep-based Policy Controller for Kubernetes

trusted-compose

A wrapper enriching docker-compose with Docker Content Trust

publicsuffix.zone

The publicsuffix.zone website

k8tlery

Dissect container images, runtimes, and orchestrators.