All repos — GH Trending Explorer

Build your own robot duck. XGO-Duck is a 3D-printable biped powered by Arduino UNO Q and 15 servos, adapted from Pollen Robotics' Microduck. Includes mechanical models, PCB designs, a BOM, and an assembly guide. Build it, explore its motion, and make it your own.

robotics 3d-printing embedded

aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

security devops containers

ZeroDayEvil / ai-security-tool

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

mozihe / z-localization

2026年东北大学T-DT实验室 RoboMaster超级对抗赛哨兵定位开源

anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

aklofas / kicad-happy

AI coding agent skills for KiCad electronics design. Works with Claude Code and OpenAI Codex. Analyze schematics, review PCB layouts, EMC pre-compliance, SPICE simulation, download datasheets, source components, and prep boards for fabrication.

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

molanocortes / takto-one

Open-source hand exoskeleton that reads twelve finger joints with magnetic encoders and drives them through tendons. Full build (TAKTO ONE) or sensing-only (TAKTO Lite). CAD, KiCad PCBs, Teensy firmware, live 3D twin in browser, phone and AR, BOM, EMG.

MatheusBomtempo / JornAI

Open source AI-assisted Instagram publishing for newsrooms - draft, review, and post breaking-news content fast, with a human always in the loop.

nmatt0 / mithril

IoT static scanner for secrets, SBOM, CVEs and more.

antithesishq / bombadil

Property-based testing for web and terminal UIs

e-m-b-a / emba

EMBA - The firmware security analyzer

ossf / cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

nmatt0 / moria

IoT firmware identification and extraction

bombshell-dev / clack

Effortlessly build beautiful command-line apps

openscopeproject / InteractiveHtmlBom

Interactive HTML BOM generation plugin for KiCad, EasyEDA, Eagle, Fusion360 and Allegro PCB designer

Source-Robotics / PAROL6-Desktop-robot-arm

BOM, STL files and instructions for PAROL6 3D printed robot arm

aboutcode-org / scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

guacsec / guac

GUAC aggregates software security metadata into a high fidelity graph database.

chainloop-dev / chainloop

Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.

margelo / react-native-mmkv

⚡️ The fastest key/value storage for React Native. ~30x faster than AsyncStorage!

InternLM / lmdeploy

LMDeploy is a toolkit for compressing, deploying, and serving LLMs.

Bouni / kicad-jlcpcb-tools

Plugin to generate BOM + CPL files for JLCPCB, assigning LCSC part numbers directly from the plugin, query the JLCPCB parts database, lookup datasheets and much more.

roboninecom / SO-ARM-102

Open-source leader + follower robot arm kit: 5 DOF + gripper, PET-CF frame, parallel gripper, LeRobot-compatible. STEP/STL, BOM, print and assembly guide.

lemonbombfall / learn-with-feynman

The Feynman Learning Technique helps users truly understand a specific concept. It's used when users want to learn new concepts, check their understanding, explain them in their own words, identify knowledge gaps, simplify complex content, or say, "I think I understand, but I can't explain it clearly."

zarf-dev / zarf

The Airgap Native Package Manager for Kubernetes

rust-secure-code / cargo-auditable

Make production Rust binaries auditable

OWASP / cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

efroemling / ballistica

The BombSquad Game Engine

fsfe / reuse-tool

This is a mirror of https://codeberg.org/fsfe/reuse-tool

CycloneDX / specification

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

vanyu0710 / Varen-AI-CAD

AI CAD 建模 Agent：一句话需求进来，调研、提问、出 BOM，逐件完成真实 CAD 建模并导出装配 STEP（参数化 BRep，不是图片或网格）；几何与碰撞检查不过关就不交付。Windows 封闭 Beta。An AI CAD modeling agent: real parametric geometry from a one-line brief, gated by geometry and interference checks.

SZURPVision / 26_NNDeployment_Lib_and_Detection_Models

RoboMaster26赛季的部署库与模型开源仓库

bingaochen / Astra-on-RoboMME

A three-tier system for memory-augmented robotic manipulation: Astra plans, a small VLM monitors, and a VLA acts. 79.13% success on RoboMME.

codesenberg / bombardier

Fast cross-platform HTTP benchmarking tool written in Go

RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

PragmaticFlow / NBomber

Distributed load-testing framework for .NET. Create distributed load test scenarios entirely using plain C# or F#. It is designed to test any system regardless of the protocol or a semantic model (Pull/Push).

microsoft / sbom-tool

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

owasp-dep-scan / dep-scan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

cdxgen / cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server