Argus

Argus This repo contains the code for our USENIX Security '23 paper "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions". Argus is a comprehensive security analysis tool specifically designed for GitHub Actions. Built with an aim to enhance the security of CI/CD...

ci-supplychain-guard

CI Supply Chain Guard A static analysis tool for detecting malicious dependencies in CI/CD pipelines before they're merged into your codebase. Author: Otsmane Ahmed Status: Research Prototype v1.0 Quick Start root@kitploit: 1. Clone and install git clone...

Dependency Scanning

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

cli

Getting started with the Snyk CLI Introduction to the Snyk CLI Snyk is a developer-first, cloud-native security tool to scan and monitor your software development projects for security vulnerabilities. Snyk scans multiple content types for security issues: Snyk Open Source: Find and automatically...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal A free, full-stack security scanning platform for bug bounty hunters and security researchers — 50+ detectors, continuous monitoring, and CI/CD gating from a single dashboard. ▶ Live app:bugbounty-arsenal.net — free, no credit card. If this is useful, please ⭐ the repo — it...

muad-dib

Installation | Usage | Features | VS Code | CI/CD Version francaise Why MUAD'DIB? npm and PyPI supply-chain attacks are exploding. Shai-Hulud compromised 25K+ repos in 2025. Existing tools detect threats but don't help you respond. MUAD'DIB combines 22 parallel scanners 278 detection rules, a...

Fern Pattern Scanner

Fern Pattern Scanner Welcome to Fern's Pattern Scanner. This scanner scans through your suggested files and finds any patterns stated within the rules/rules.yaml using regex. Then a report is generated with all the findings. This project is used to showcase how a custom security scanner can be...

api-security-audit-action

GitHub Action: 42Crunch REST API Static Security Testing Действие REST API Static Security Testing находит контракты REST API, соответствующие спецификации OpenAPI OAS, ранее известной как Swagger, и выполняет по ним тщательные проверки безопасности. Поддерживаются OAS v2 и v3.0.x в форматах JSON...

CVE-2026-24061-GNU-inetutils-Telnet-Detector

CVE-2026-24061 Детектор GNU inetutils Telnet Безопасный инструмент пассивного обнаружения для выявления потенциальной подверженности CVE-2026-24061 — уязвимости, затрагивающей определённые версии GNU inetutils telnet. Этот проект предназначен для DevOps-конвейеров , аудита инфраструктуры и защитн...

azure-sentinel-detection-engineering

Azure Sentinel Detection Engineering Detection engineering on a live Microsoft Sentinel and Defender XDR environment I operate. Nine custom analytics rules span three planes, each mapped to MITRE ATT&CK and proven end to end: a controlled action triggers the rule, the rule raises an incident, and...

DepAlert

DepAlert Agent CTWall This tool is part of the CTWall platform. See: CTWall Description DepAlert is an open-source security gate for your CI/CD pipeline. It analyzes SBOMs against malware intelligence data and quickly tells you whether your build includes known malicious packages. DepAlert solves...

nuclei-action

Это Nuclei Action упрощает оркестрацию Nuclei с помощью GitHub Action. Интегрируйте все ваши Nuclei Templates в мощные непрерывные рабочие процессы безопасности и сделайте их частью вашего безопасного цикла разработки ПО. Nuclei Action Совместимость v3.0.0+ работает на Node.js v24 и использует...

ccs

Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...

trajan

Trajan: Scanneur de sécurité CI/CD Trajan analyse les pipelines CI/CD à la recherche de vulnérabilités de sécurité que les attaquants utilisent pour compromettre les chaînes d'approvisionnement logicielles. Il prend en charge GitHub Actions, GitLab CI, Azure DevOps, Jenkins et JFrog. Ce qu'il fai...

GuardModel

GuardModel Block malicious AI models in your pipeline with one line of YAML. GuardModel is a GitHub Action that automatically scans ML model files for malicious code, vulnerabilities, and security risks in CI/CD pipelines. It blocks dangerous models before they reach production by detecting pickl...

Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis...

SecuSphere

SecuSphere Your Comprehensive DevSecOps Solution Welcome to SecuSphere, your one-stop solution for all DevSecOps needs. Our centralized platform is expertly designed to manage and optimize your vulnerability management, CI/CD pipeline integration, security assessments, and DevSecOps practices...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

automatic-api-attack-tool

Outil d'Attaque Automatique d'API L'outil d'attaque d'API personnalisable d'Imperva prend une spécification d'API en entrée, et génère et exécute des attaques basées sur celle-ci en sortie. L'outil est capable d'analyser une spécification d'API et de créer des scénarios d'attaque par fuzzing en...