Repository Index

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

• containers
• docker
• go
• golang

GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

• php
• github-actions
• php-extensions
• code-coverage

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

• clang
• cpp
• c
• clang-tidy

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code

PostgreSQL migration linter. Blocks unsafe migrations before merge: 112 rules, the real Postgres parser, lock analysis, auto-fix. CLI, GitHub Action, MCP.

• cli
• database
• ddl
• devops