Repository Index

A static analysis security vulnerability scanner for Ruby on Rails applications

• ruby
• rails
• security
• static-analysis

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily

• php
• security-advisories
• security-vulnerability
• composer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

grep rough audit - source code auditing tool

• security
• shell
• vulnerability-detection
• source-code

A static analysis tool for security

• php
• static-code-analysis
• security-tools
• vulnerability-scanners

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code