aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

anchore / grype

A vulnerability scanner for container images and filesystems

future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Bearer / bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

project-copacetic / copacetic

🧵 CLI tool for directly patching container images!

quay / clair

Vulnerability Static Analysis for Containers

eraser-dev / eraser

🧹 Cleaning up images from Kubernetes nodes

sonatype-nexus-community / nancy

A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype Guide and Sonatype Lifecycle Index

cc1a2b / JShunter

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.

ZupIT / horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.