Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
47,133 repositories indexed
1–24 of 29 · Most stars
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
Split your file into encrypted fragments so that you don't need to remember a passcode
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
Reflective PE packer.
- packer
- pe
- crypter
- assembly
Protect against malicious open source packages 🤖
Platform-Agnostic Security Tokens implementation in GO (Golang)
- go
- golang
- token
- past
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
📖 Build a RESTful API on Go: Fiber, PostgreSQL, JWT and Swagger docs in isolated Docker containers.
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Library to generate TOTP/HOTP codes
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
Audit and fix your Mac's security in one command. No agent, no signup, open source.
- cli
- compliance
- endpoint-security
- golang
CLI tool for running coding agents inside hardware-isolated microVMs
Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) library for Go.
- hotp
- totp
- totp-codes
- authenticator
Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.
hashgen - the blazingly fast hash generator
- cyclone
- generator
- hash
- md5
go-fasttld is a high performance effective top level domains (eTLD) extraction module.
- compressed-trie
- idn
- idna
- ipv4