Repository Index

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker

Vulnerability Static Analysis for Containers

• containers
• static-analysis
• go
• kubernetes

Go security checker

• golang
• security
• security-tools
• security-automation

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation