AwesomeRepos
Sign in

Tags / Security /

Vulnerability scanner

Tool that scans applications, dependencies, containers, or hosts for known vulnerabilities; not a port scanner.

Repositories

15

Net stars gained, last 7 days

+2,649

Top-level Tag

Security

Net stars gained each day, last 90 days

2026-10-21: +985 net stars. Most from openai/php2shell-checker, +563.2026-10-22: +995 net stars. Most from openai/php2shell-checker, +294.2026-10-24: +944 net stars. Most from assetnote/php2shell-scanner, +336.2026-10-25: +927 net stars. Most from NVIDIA/SkillSpector, +280.2026-10-26: +1,200 net stars. Most from NVIDIA/SkillSpector, +562.

Peak days

  1. 1

    Oct 21, 2026 +985 net stars (median day +178)

  2. 2

    Oct 22, 2026 +995 net stars (median day +178)

  3. 3

    Oct 24, 2026 +944 net stars (median day +178)

  4. 4

    Oct 25, 2026 +927 net stars (median day +178)

  5. 5

    Oct 26, 2026 +1,200 net stars (median day +178)

A peak day has at least 2 times the net stars of the median day of this chart, and at least 100 more. For each peak day, the list shows the repositories that gained the most net stars that day. It also shows their GitHub releases of that day or the day before (UTC), and their creation date when it was 14 days or less before. These events occurred near the same day. They do not show why the stars came.

Largest

Most stars in total now.

  1. aquasecurity/trivy39K

    description: Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  2. projectdiscovery/nuclei33K

    readme: Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates.

  3. goharbor/harbor30K

    readme: Harbor scans images regularly for vulnerabilities and has policy checks to prevent vulnerable images from being deployed.

  4. NVIDIA/SkillSpector24K

    readme: **Live vulnerability lookups**: SC4 queries OSV.dev for real-time CVE data with automatic offline fallback

  5. wazuh/wazuh18K

    readme: Wazuh agents pull software inventory data and send this information to the server, where it is correlated with continuously updated CVE (Common Vulnerabilities and Exposure) databases

  6. CISOfy/lynis17K

    readme: It will also scan for general system information, vulnerable software packages, and possible configuration issues.

  7. anthropics/oss-scanner1.7K

    readme: OSS Scanner is a service by Anthropic to scan critical open-source repositories for security vulnerabilities.

  8. openai/php2shell-checker1.5K

    readme: Get a version-based PHP2Shell warning from a website's PHP headers or local installation.

  9. assetnote/php2shell-scanner981

    readme: A command-line tool for detecting CVE-2026-109618 and CVE-2026-109619 in PHP applications.

  10. hevnsnt/CVEngine570

    readme: cvENGINE finds everything you expose, then tells you which of today's exploited CVEs can actually hit you, with proof.

Newest Admissions

Entered the index by the rising rule, newest first.

  1. arthur-ai/deckard173

    readme: Scan your endpoints, cloud, and network for shadow Agents and track them in your SIEM.

  2. ittcsec/ittcsecscan-public211

    readme: finds real security problems in your cloud, connects them into attack paths, ranks

  3. hevnsnt/CVEngine570

    readme: cvENGINE finds everything you expose, then tells you which of today's exploited CVEs can actually hit you, with proof.

  4. Anton-Barinov/php2shell-patches128

    readme: Audit your servers for vulnerability status and verify installed patches with a single command

  5. NPMscan/npmscan-action532

    readme: Known vulnerabilities and known malware** from OSV.dev and GitHub Advisories

  6. JoasASantos/php2shell-scanner111

    description: Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE).

  7. assetnote/php2shell-scanner981

    readme: A command-line tool for detecting CVE-2026-109618 and CVE-2026-109619 in PHP applications.

  8. openai/php2shell-checker1.5K

    readme: Get a version-based PHP2Shell warning from a website's PHP headers or local installation.

  9. anthropics/oss-scanner1.7K

    readme: OSS Scanner is a service by Anthropic to scan critical open-source repositories for security vulnerabilities.

All 15 in the Repository Index

How a repository gets this Tag

An agent read the description, the GitHub topics, and the start of the README of each repository, and chose Tags only from the checked-in Tag list. For each Tag it quoted the text, and a code check kept the Tag only when the quote is in that text. The quote under each repository is that evidence. A Tag does not rank repositories and does not say that one can replace another. A wrong Tag? Use "Report a problem with this page" on the page of the repository. Withheld Repositories are left out of all numbers on this page.