A vulnerability scanner for container images and filesystems
Repository Index
47,133 repositories indexed
1–4 of 4 · Most stars
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
- containers
- docker
- go
- golang
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code
A Crystal tool for generating CycloneDX Software Bill of Materials (SBOM) from Crystal shard projects.
- crystal
- cyclonedx
- cyclonedx-sbom
- sbom