Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
Repository Index
67,262 visible repositories in the index
49–55 of 55 · Most stars
Cumulus. Threat modeling the Clouds.
- card-game
- cornucopia
- elevation-of-privilege
- eop
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
- golang
- observability
- opentelemetry
- policy-engine
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code
Agile Threat Modeling as Code
- cdk
- modeling
- threagile
- threat
A small, flexible authorization core for Go, built around subject–action–resource–scope checks.
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.