Repository Index

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection

Find secrets with Gitleaks 🔑

• security
• security-tools
• git
• golang

Fast passive subdomain enumeration tool.

• subdomain-enumeration
• osint
• subdomains
• bugbounty

Automatically provision and manage TLS certificates in Kubernetes

• kubernetes
• letsencrypt
• tls
• certificate

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

• identity
• identity-management
• user-management
• users

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

• oidc
• kubernetes
• idp
• identity-provider

The slightly more awesome standard unix password manager for teams

• go
• password-manager
• git
• gpg

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

• external-secrets
• kubernetes
• kubernetes-secrets
• secrets-manager

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

• authorization
• permissions
• security
• zanzibar

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• hacktoberfest
• abac
• access-control
• acl

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

• scanning-tool
• secret-keys
• secrets-management
• infosectools

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Generic Low Interaction Honeypot

• honeypot
• hacktoberfest

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response

Integrates Spiffe and Vault to have secretless authentication

• spire
• spiffe
• vault
• hashicorp

Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.

• golang
• go
• go-library
• golang-library