Repository Index

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers

Find secrets with Gitleaks 🔑

• security
• security-tools
• git
• golang

Find, verify, and analyze leaked credentials

• secret
• trufflehog
• credentials
• security

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

• steampipe
• postgresql
• postgresql-fdw
• cloud

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

• scanning-tool
• secret-keys
• secrets-management
• infosectools

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

• devsecops
• entropy
• gdpr
• golang

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

• devops
• devsecops
• security
• golang

Safe access to production databases

• acl
• database
• database-access
• database-security

Static analysis from configs → Kubernetes NetworkPolicies in seconds

• cloud-native
• devsecops
• golang
• helm