secure-agent-playbook

Secure Agent Playbook An open-source security playbook for AI agents. Structured, OWASP-grounded procedures that enable agents to perform security engineering tasks — from code review to AI agent security audits. Table of Contents Why Use This? What This Is Quick Start Skills Catalog Agents Examp...

vulnrepro-benchmark

VulnRepro A benchmark that checks if an AI model can actually review vulnerable code, or if it just sounds confident. Most security benchmarks ask one question: can the model find the bug? That is only half the job. The other half, the part that actually wears you down in real review work, is not...

scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard Command Line Interface Prerequisites Installation Authentication Basic Usage Checks Default...

CVE-2023-4762-Code-Review

Source https://github.com/buptsb/CVE-2023-4762...

DakshSCRA

Daksh SCRA Source Code Review Assist Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a well-structured...

tusk-cli

!IMPORTANT Previously used tusk-drift-cli? This repo has moved to tusk-cli, and older installed CLI versions may not auto-update across the rename. Please reinstall using the current install instructions below. The Tusk CLI provides tools for automated testing workflows. It supports three product...

APKHunt

APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...

bidi-guard

bidi-guard Scan code for invisible bidirectional Unicode characters Why This Exists Invisible Unicode bidirectional characters can make source code display differently than it executes. This is CVE-2021-42574 — the Trojan Source attack. An attacker embeds characters that reverse text direction. I...

VCG

==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...

autoSource

AutoSource AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLCSoftware Development Life Cycle. The user can scan th...

Karma Pro 0.17

Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...

ai-code-review

🔍 codereview AI-powered code review in your terminal. One command. Instant feedback. Catches security vulnerabilities, bugs, and bad patterns before they hit production. Install · Quick Start · Usage · Providers · Contributing What It Does codereview sends your code to an LLM and returns a...

voron-crypto

Voron crypto/protocol library — request for review This is the crypto and messaging-protocol core of a small E2EE messenger project, pulled out on its own for outside review. It is not the whole product — the Android client and deployment config are intentionally left out; this is just the part...

CVE-2026-22686

Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...

GuardScan

🛡️ GuardScan 100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | | |// \| \/ |/ // \| | ||| Privacy-First...

appsec-agent

AppSec Agent AI-powered security agents for code review, PR scanning, threat modeling, fix generation, and more. You can use AppSec Agent in three ways: Path| Best for| Get started ---|---|--- CLI agent-run| Trying agents from your terminal| Getting started npm library| Building your own app or...

awesome-appsec-interview

Awesome AppSec Interview A curated list of resources, practice questions, and study materials to help you prepare for Application Security Engineer interviews, organized by interview type. Contents Interview Overview Secure Code Review Threat Modeling Coding & Scripting Scenario-Based Interviews...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix the issue where the nvmemdeviceput function was not called, leading to a reference leak. In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained through nvmemdevicefind was no...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +3 more potentially affected by CVE-2026-107293 via pydantic-ai (>=2.0.0b1, <=2.27.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107293 Source advisory: OSV:PYSEC-2026-4274...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +3 more potentially affected by CVE-2026-107294 via pydantic-ai (>=2.0.0b1, <=2.23.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107294 Source advisory: OSV:PYSEC-2026-4280...