Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.
Repository Index
47,133 repositories indexed
49–72 of 75 · Most stars
AWS Identity and Access Management Visualizer and Anomaly Finder
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Pipit is a Wagtail CMS boilerplate which aims to provide an easy and modern developer workflow with a React-rendered frontend.
Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
Defang Deploy CLI. Develop Once, Deploy Anywhere. Take your app from Docker Compose to a secure and scalable deployment on your favorite cloud in minutes.
- aws
- cloud
- compose
- docker-compose
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
- haveibeenpwned
- cloudflare
- zxcvbn
- serverless
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Install `wasm-pack` by downloading the executable
- wasm-pack
- wasm
- webassembly
- github-action
Community curated list of System and Network policy templates for the KubeArmor and Cilium
- runtime-security
- kubearmor
- cilium
- system-policy
🌊 Floom, "The K8s for AI", orchestrates & executes Generative AI pipelines, Empowering Developers and DevOps to focus on what matters.
Install `Trunk` by downloading the executable
- trunk
- yew
- seed
- webassembly
DepCharge is a tool designed to help orchestrate the execution of commands across many directories at once.
- orchestration
- dependency-manager
- git-submodule
- cli
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
Convert Postman Collection v2.1 JSON into executable pytest test suites
- api-testing
- postman
- pytest
- python
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
- agentic-ai
- ai-safety
- fastapi
- langchain
Static analysis from configs → Kubernetes NetworkPolicies in seconds
Pre-execution safety analysis for MySQL DDL/DML operations.
- ddl
- mysql
- aws-rds-aurora-mysql
- aws-rds-mysql
Install `wasm-bindgen` by downloading the executable
- rust
- wasm-bindgen
- wasm
- yew
Provision strong AWS security policies easily using the AWS CDK, v1 or v2.
- aws
- cdk
- iam