Repository Index

Software sandbox for storage of sensitive information in memory.

• security
• golang
• go
• cryptography

self-hosted tag-based time tracking

• golang
• selfhosted
• freesoftware
• privacy

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

• in-toto
• software-supply-chain
• security

Reverse-engineering tool for docker environments

• docker
• docker-compose
• reverse-engineering
• cli

Scout is a standalone open source software solution for DIY video security.