gitleaks / gitleaks
Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.
gitleaks / gitleaks
aquasecurity / trivy
Open-source scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM data in containers, filesystems, git repos, VM images, and Kubernetes.
trufflesecurity / trufflehog
Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.
betterleaks / betterleaks
Find leaked secrets everywhere.
bytebase / bytebase
Database governance built for humans and agents — controlling changes and access across every major database.
gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
project-copacetic / copacetic
🧵 CLI tool for directly patching container images!
boostsecurityio / poutine
poutine, a supply chain vulnerability scanner for build pipelines
chainloop-dev / chainloop
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
safedep / vet
Protect against malicious open source packages 🤖
turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
ContainerSSH / ContainerSSH
ContainerSSH: Launch containers on demand
praetorian-inc / titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
safedep / pmg
PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
MarinJursic / production-readiness-checklist
Evidence-driven production readiness checklist for shipping web applications with confidence
secureCodeBox / secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box