trivy-db

trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc. CLI The trivy-db CLI tool builds vulnerability DBs. A GitHub Actions workflow...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project Using with hook frameworks Pre-commit Husky Directly invoking talisman Upgradi...

wrongsecrets-binaries

wrongsecrets-binaries This is a supportive repository for OWASP WrongSecrets. Here we create our binaries which are included in the official project. Want to add a challenge related to secrets hiding in binary? Open a ticket at WrongSecrets issues. Want to fix something you found in one of the...

trivy-java-db

trivy-java-db Overview trivy-java-db builds a SQLite database from maven-index repository data, storing ArtifactID, GroupID, Version and sha1 for jar files. The DB is used in Trivy to discover information about jars without GAV inside them. Update interval Every day at 00:00 Download the java...

s3crets_scanner

S3cret Scanner: Hunting For Secrets Uploaded To Public S3 Buckets S3cret Scanner tool designed to provide a complementary layer for the Amazon S3 Security Best Practices by proactively hunting secrets in public S3 buckets. Can be executed as scheduled task or On-Demand Automation workflow The...

detect-secrets

detect-secrets About detect-secrets is an aptly named module for surprise, surprise detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible ,...

foxguard

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14 languages, with cross-file analysi...

GitGot

Description GitGot is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive secrets. How it Works During search sessions, users will provide feedback to GitGot about search results to ignore, and GitGot prunes the set of...

dismember

🔪 Dismember Dismember es un conjunto de herramientas de línea de comandos para Linux que se puede utilizar para escanear la memoria de todos los procesos o de algunos específicos en busca de secretos comunes y expresiones regulares personalizadas, entre otras cosas. Eventualmente se convertirá en...

security-enablement-platform-poc

Security Enablement Platform — POC Status: Work in progre...

SecScan

SecScan Local-LLM-powered security scanner for GitHub repos...

lw-cnapp-microservices-iac

Project 2: Microservices with Infrastructure as Code ⚠️ WAR...

Qualys released QScanner – a console vulnerability scanner for container images

QualysreleasedQScanner - a console vulnerability scanner for container images. Feed it an image and get a list of vulnerabilities a la Trivy. It supports: " Local Runtimes: Scan images from Docker, Containerd, or Podman. Local Archives: Analyze Docker images or OCI layouts from local files. Remot...

Elevate Your Container Security with QScanner in 2025

Securing container images is more important than ever in the dynamic world of cloud-native technologies. Organizations have long utilized reliable solutions from Qualys to scan their images, ensuring applications run smoothly and securely. These tools have played a crucial role in maintaining the...

truffleHog - Searches Through Git Repositories For High Entropy Strings And Secrets, Digging Deep Into Commit History

Searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. Join The Slack Have questions? Feedback? Jump in slack and hang out with me...