33 matches found
mcp-xray
MCP X-Ray 概述 MCP X-Ray 是一个统一的、开源的模型上下文协议（MCP）服务器安全扫描与渗透测试解决方案。它生成可用于生产的 SARIF 报告，以便无缝集成到安全工具和 CI/CD 流水线中。扫描结果可以可选地上传到 Traceforce Atlas 进行集中安全管理和跟踪。Atlas 注册表中包含超过 600 个 MCP，为 MCP 生态系统提供了全面的安全评估数据库。 安装 前提条件 Go 1.25.4 或更高版本 从源码构建 克隆仓库 git clone https://github.com/traceforce/mcp-xray cd mcp-xray...
cosign
cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...
electronegativity
Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...
CVE-2015-10034
CVE-2015-10034 此仓库是为了演示 J-TAS Action 而创建的。 workout-organizer-2aaedb7f69ea398a0217493fefe8f19b31ee0775 文件夹包含与 CVE-2015-10034 相关的脆弱应用程序。 我们已包含 J-TAS Action 执行分析结果的 SARIF 文件。...
reposaur
Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...
stacs
Static Token And Credential Scanner 这是什么？ STACS 是一个基于 YARA 的静态凭据扫描器，支持二进制文件格式、嵌套归档分析、可组合的规则集和忽略列表，以及 SARIF 报告。 STACS 支持什么？ 目前，STACS 支持递归解包以下格式： 7z, ar, bz2, cab, cpio, gz, iso, rar, rpm, tar, xar, xz, zip, dmg 由于 STACS 基于检测到的文件类型工作，使用这些格式的专有文件格式和其他文件类型会自动得到支持。这包括 Docker 镜像、Android APK、Java JAR...
SecretScrub
SecretScrub SecretScrub eliminará todos sus secretos sucios hardcodeados. Este script procesa archivos en formato de archivo SARIF que es generado por varias herramientas de análisis estático. La herramienta escanea un directorio dentro del sistema de archivos, redacta todas las instancias de...
sast-scan-action
Escaneo SAST de Offensive360 — Acción de GitHub Ejecuta un análisis completo de seguridad de aplicaciones estáticas SAST de Offensive360 en cada push o pull request. Análisis profundo de taint y flujo de datos en más de 60 lenguajes, resultados como SARIF para la pestaña de code scanning de GitHu...
pythia-sql-clairvoyance
具备 6 种检测方法、AI 驱动修复、SARIF 输出及 CI/CD 集成的生产级 SQL 注入扫描器。 快速开始 · 文档 · Docker · AI 分析 · 在 GitHub 上星标 实战演示 实时扫描 · PHP 脆弱商店 · 检测到 11 个发现项 · 安全模式 · 2265.56s HTML 报告 — 发现项概览，含严重性徽章和 OWASP 映射 | !P...
Exploit for Improper Input Validation in Toolkit_Project Toolkit
gha-exploit-guard Standalone GitHub Action that scans GitHub...
MAL-2025-46921 Malicious code in sarif (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fa2b10f84e5b81ecdaf78fe9fa765da27b2d8946e98e58b4a1b25dfacd3c62f The OpenSSF Package Analysis project identified 'sarif' @ 0.1.3 rubygems as malicious. It is considered malicious because: - The package execute...
Malicious code in sarif (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fa2b10f84e5b81ecdaf78fe9fa765da27b2d8946e98e58b4a1b25dfacd3c62f The OpenSSF Package Analysis project identified 'sarif' @ 0.1.3 rubygems as malicious. It is considered malicious because: - The package execute...
Malicious code in codeql-sarif-security-standard-annotator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf28531c7b9ae5e115da81a3041d6e35bed2b6764cfabb14fdd1b11ff50a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora: Security Advisory for rust-clippy-sarif (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-clang-tidy-sarif (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-sarif-fmt (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-hadolint-sarif (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-shellcheck-sarif (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
