devsecops

npmscan-action

+319

Catch risky npm dependency changes before they merge.

shannon

+1.2k

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Clouds-Against-Humanity

+113

Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.

betterleaks

+199

Find leaked secrets everywhere.

gitleaks

+262

Find secrets with Gitleaks 🔑

infisical

+206

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

trivy

+212

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

google/mantis

+158

A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

django-DefectDojo

+120

Open-Source Unified Vulnerability Management, DevSecOps & ASPM