Repository Index

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

• ai-security
• application-security
• cli
• code-scanning

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

• semmle-ql
• codeql
• github-advanced-security
• github-security-lab

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp

A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust

• ci
• cli
• developer-tools
• open-source

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies

• code-quality
• ci-tools

Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.

Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.

• maven-plugin
• maven
• java
• report

Detect uses of legacy Java APIs

• java
• static-analysis
• maven-plugin
• guava

NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.

• dependency-analysis
• csharp
• static-code-analysis
• msbuild

Spends CPU cycles so you don't spend tokens. The LLM gets a briefing packet instead of a flashlight in a dark room.

Architecture linter for Swift — enforce Clean Architecture import rules via SwiftSyntax. A CI-ready guardrail for AI-assisted development.

• swift
• swiftsyntax
• clean-architecture
• linter