trufflesecurity / trufflehog

Find, verify, and analyze leaked credentials

txthinking / brook

A cross-platform programmable network tool

kubescape / kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

unkeyed / unkey

The Developer Platform for Modern APIs

entireio / cli

📜 Entire CLI hooks into your Git workflow to capture AI agent sessions as you work. Sessions are indexed alongside commits, creating a searchable record of how code was written in your repo.

dagucloud / dagu

Self-hostable workflow orchestrator for teams whose main work isn't orchestration. Declarative YAML over your scripts, SSH commands, containers, etc; keep workflows separate from business logic. One binary, no database, runs on limited H/W resources. Alternative to Airflow / Cron / Job Scheduler.

moby / swarmkit

A toolkit for orchestrating distributed systems at any scale. It includes primitives for node discovery, raft-based consensus, task scheduling and more.

olafhartong / sysmon-modular

A repository of sysmon configuration modules

projectdiscovery / proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

envoyproxy / ratelimit

Go/gRPC service designed to enable generic rate limit scenarios from different types of applications.

rabbitstack / fibratus

Security sensor for realtime threat detection and protection

SpectoLabs / hoverfly

Lightweight service virtualization/ API simulation / API mocking tool for developers and testers

DataDog / stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

failsafe-go / failsafe-go

Fault tolerance and resilience patterns for Go

isacikgoz / gitin

commit/branch/workdir explorer for git

charlie0129 / batt

Control and limit battery charging on Apple Silicon MacBooks.

lqqyt2423 / go-mitmproxy

mitmproxy implemented with golang. 用 Golang 实现的中间人攻击（Man-in-the-middle），解析、监测、篡改 HTTP/HTTPS 流量。

appleboy / CodeGPT

A CLI written in Go language that writes git commit messages or do a code review brief for you using ChatGPT AI (gpt-4.1, gpt-4o model) and automatically installs a git prepare-commit-msg hook.

HexmosTech / git-lrc

Free, Micro AI Code Reviews That Run on Git Commit

gammazero / workerpool

Concurrency limiting goroutine pool

lmittmann / tint

🌈 slog.Handler that writes tinted (colorized) logs

Simple-Tracker / qBittorrent-ClientBlocker

一款适用于 qBittorrent/Transmission (Beta)/BitComet (Beta, Partial) 的客户端屏蔽器, 默认屏蔽包括但不限于迅雷等客户端. A client blocker compatible with qBittorrent/Transmission (Beta)/BitComet (Beta, Partial) which is prohibited to include but not limited to clients such as Xunlei.

fxamacker / cbor

CBOR codec (RFC 8949, RFC 8742) with CBOR tags, Go struct tag options (toarray, keyasint, omitempty, omitzero), float64/32/16, big.Int, and fuzz tested.

jf-tech / omniparser

omniparser: a native Golang ETL streaming parser and transform library for CSV, JSON, XML, EDI, text, etc.

mdlayher / netlink

Package netlink provides low-level access to Linux netlink sockets (AF_NETLINK). MIT Licensed.

go-redis / redis_rate

Rate limiting for go-redis

DataDog / KubeHound

Tool for building Kubernetes attack paths

tastyeffectco / sandboxd

Open-source, self-hosted AI app builder — an agent builds real apps in isolated sandboxes on your own server, each live at a preview URL. Self-host in one command. MIT.

cashapp / hermit

🐚 Hermit manages isolated, self-bootstrapping sets of tools in software projects.

pipelab-org / pipelock

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

golang / sync

[mirror] concurrency primitives

Gouryella / drip

Self-hosted tunneling solution to expose localhost securely - unlimited bandwidth, no third-party servers

fabriziosalmi / caddy-waf

Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)

IRNova / Nova-Proxy-App

نوا پروکسی - ابزار پروکسی محلی قدرتمند با قابلیت‌های GSA (Google Apps Script) با Domain Fronting، تکه‌تکه‌سازی TLS، تزریق ECH، بازپخش QUIC، MITM و مسیریابی هوشمند. طراحی شده برای عبور از فیلترینگ سنگین و DPI پیشرفته.

ashkulz / committers.top

CLI tool which uses the GitHub GraphQL API to rank users according to number of contributions, and corresponding static website.

mappu / miqt

MIT-licensed Qt bindings for Go

alpkeskin / rota

A high-performance proxy rotation engine with automated IP management and real-time health monitoring

sethvargo / go-limiter

A supersonic rate limiting package for Go with HTTP middleware.

xyproto / orbiton

Snappy and configuration-free text editor/IDE for the terminal. Suitable for writing git commit messages, editing Markdown, config files, source code, man pages and for quick edit-format-compile cycles when programming. Has syntax highlighting, jump-to-error, rainbow parentheses, macros, copy/paste portals, gdb, dlv and LSP support.

SunBK201 / UA3F

Advanced HTTP(S) Rewriting Proxy

google / kube-startup-cpu-boost

Kube Startup CPU Boost is a controller that increases CPU resource requests and limits during Kubernetes workload startup time

cmars / onionpipe

Onion addresses for anything.

blockloop / scan

Tiny lib to scan SQL rows directly to structs, slices, and primitive types

turbot / tailpipe

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

swuecho / chat

chat web app for teams, sass with user management and ratelimit, support chatgpt(openai & azure), claude, gemini and ollama model

labring / aiproxy

AI Proxy is a high performance AI gateway using OpenAI / Claude / Gemini protocol as the entry point. It features intelligent error handling, multi-channel management, and comprehensive monitoring. With support for multiple models, rate limiting, and multi-tenant isolation.

pilinux / gorest

Go RESTful API starter kit with Gin, JWT, GORM (MySQL, PostgreSQL, SQLite), Redis, Mongo, 2FA, email verification, password recovery

azrtydxb / procoder

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call unfinished work done, and a lessons loop that closes each escaped bug's class. One Go binary, no runtime deps, works with 20+ agents.

agent0ai / spynel

One chat, unlimited AI orchestration.

zachahn / vomit

Clean up Claude's token vomit with a separate LLM. Save your tokens, Opus is hopeless

mitkox / esf

Engineering Software Factory - open source, self-hosted, local AI first

Stellar-Pathfinder / stellar-pathfinder

A corridor-integrity monitor for the Stellar network. Prices stablecoin→fiat-token corridors, scores routes against independent reference rates, and refuses to recommend when all options are unusable. Features wallet integration (Freighter/Albedo) and on-chain attestations via Soroban smart contracts.

HanawaBanana / workbuddy2api

WorkBuddy2API 延续仓库 —— 账号池转 OpenAI 兼容 API（原 Sliverkiss/workbuddy2api 已删库，MIT）

dimitri / sqlfmt

A `gofmt`-style command-line formatter for PostgreSQL SQL

vectal-labs / repo-sync

your git repos, always in sync. automatic commits, pulls, and pushes on macOS.

Sagisawa / GBF-Accelerator

碧蓝幻想（GBF）本地静态资源缓存与代理转发工具

typesafe-docs / byterange

RFC 9110 HTTP Range parsing and serving for Go, with limits on range count and multipart amplification.

ArkGravity / burrow

Lightweight, self-hosted OIDC identity provider for small teams. Go + React, password + mandatory TOTP, RBAC, and shared SSO. MIT licensed.

johnreginald / donewhen

A new way to work with your AI Agents. Self-hosted issue tracker that keeps the record of AI-built work: done-when checklists, linked commits, engineering docs, MCP-first.

mitis-cloud / understudy

Best-effort high availability for single-replica Kubernetes workloads: no downtime from announced node disruptions (drains, upgrades, consolidation, spot reclaims) without a standing second replica.