Repository Index

🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.

• http
• cli
• client
• terminal

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

• agent-security
• agent-skills
• agentic-ai
• ai-security

Continuous Profiling Platform. Debug performance issues down to a single line of code

• continuous-profiling
• profiling
• performance
• golang

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp

A static analysis security vulnerability scanner for Ruby on Rails applications

• ruby
• rails
• security
• static-analysis

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

A runtime developer console and IRB alternative with powerful introspection capabilities.

• irb
• console
• ruby
• debugger

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

Production-safe dynamic tracing and diagnostics for Java applications—attach to live JVMs with no restart or recompilation.

• btrace
• java
• bytecode-instrumentation
• diagnostics

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

• static-analysis
• php
• type-inference
• security-analysis

Your platform team, as a service

• xcode
• swift
• objective-c
• scalability

eBPF Observability - Distributed Tracing and Profiling

• opentelemetry
• kubernetes
• wasm
• apm

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

• java
• static-analysis
• android
• nullability

:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily

• php
• security-advisories
• security-vulnerability
• composer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

grep rough audit - source code auditing tool

• security
• shell
• vulnerability-detection
• source-code

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

• security
• sdl
• linter
• visual-studio-code-extension

eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!

• ebpf
• profiling
• pprof
• performance

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

Requirements management using version control.

• requirements-management
• version-control
• documentation
• traceability

A fist full of code metrics

• code-quality
• hacktoberfest
• maintainability
• software-quality