Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.
Repository Index
47,133 repositories indexed
49–72 of 78 · Most stars
AWS Identity and Access Management Visualizer and Anomaly Finder
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
Defang Deploy CLI. Develop Once, Deploy Anywhere. Take your app from Docker Compose to a secure and scalable deployment on your favorite cloud in minutes.
- aws
- cloud
- compose
- docker-compose
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
- haveibeenpwned
- cloudflare
- zxcvbn
- serverless
Hush is a runtime configuration loader for Elixir applications
- elixir
- aws
- hush
- secret-management
Upload failing iOS snapshot tests cases to S3
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
Go Wrapper for using localstack
- localstack
- go
- golang
- testing
A tool to Terraform and automate password cracking on AWS.
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
Kubernetes secrets generator plugin for kustomize
- kubernetes
- kustomize
- secret-management
- kubernetes-secrets
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Community curated list of System and Network policy templates for the KubeArmor and Cilium
- runtime-security
- kubearmor
- cilium
- system-policy
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
Swarm Management is a python application, installed with pip. The application makes it easy to manage a Docker Swarm by configuring a single *.yml file describing which stacks to deploy, and which networks, configs or secrets to create.
- docker
- deployment
- containers
- docker-swarm
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
A Google Secret Manager Provider for Hush
- elixir
- gcp
- secrets-management
- hush
An AWS Secrets Manager Provider for Hush
- elixir
- secrets-manager
- aws
- hush
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
- agentic-ai
- ai-safety
- fastapi
- langchain