gitleaks / gitleaks
Find secrets with Gitleaks 🔑
gitleaks / gitleaks
aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
bytebase / bytebase
Database governance built for humans and agents — controlling changes and access across every major database.
gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
ContainerSSH / ContainerSSH
ContainerSSH: Launch containers on demand
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
betterleaks / betterleaks
Find leaked secrets everywhere.
project-copacetic / copacetic
🧵 CLI tool for directly patching container images!
safedep / vet
Protect against malicious open source packages 🤖
secureCodeBox / secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box
praetorian-inc / titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
chainloop-dev / chainloop
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
safedep / pmg
PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
boostsecurityio / poutine
poutine, a supply chain vulnerability scanner for build pipelines
MarinJursic / production-readiness-checklist
Evidence-driven production readiness checklist for shipping web applications with confidence