Repository Index

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

• agent-security
• agent-skills
• agentic-ai
• ai-security

PHP Static Analysis Tool - discover bugs in your code without running it!

• phpstan
• static-analysis
• php
• php7

Bandit is a tool designed to find common security issues in Python code.

• linter
• bandit
• security-tools
• security-scanner

A static analysis security vulnerability scanner for Ruby on Rails applications

• ruby
• rails
• security
• static-analysis

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

It's not just a linter that annoys you!

• static-analysis
• linter
• static-code-analysis
• code-quality

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects

• csharp-sourcegenerator
• hacktoberfest
• patterns
• contributions-welcome

Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.

• business-logic
• code-analysis
• code-understanding
• codebase-analysis

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

A static code analyser for annotated TODO comments

• go
• linters
• todo
• hacktoberfest

Remove unnecessary type conversions from Go source

A static analysis tool for security

• php
• static-code-analysis
• security-tools
• vulnerability-scanners

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

• gixy
• nginx
• nginx-configuration
• security

Know the risk of merging a pull request, and where it lives. Free, open-source CLI and GitHub Action: after your AI review, farol shows the riskiest files, what they reach, diff coverage and contract breaks. TypeScript/React, Go, Python.

• ai-code-review
• cli
• code-review
• developer-tools

A collection of static analyzers based on Roslyn that integrate with VS