1.anchore / syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
+60 stars
from 9,750 · score 4.11
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
10 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.anchore / grype
A vulnerability scanner for container images and filesystems
+48 stars
from 13,107 · score 3.89
3.securego / gosec
Go security checker
+9 stars
from 8,986 · score 2.30
4.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+7 stars
from 2,772 · score 2.08
5.dominikh / go-tools
Staticcheck - The advanced Go linter
+6 stars
from 6,915 · score 1.95
6.safedep / vet
Protect against malicious open source packages 🤖
+5 stars
from 1,118 · score 1.79
7.quay / clair
Vulnerability Static Analysis for Containers
+4 stars
from 11,082 · score 1.61
8.revive-lint / revive
🔥 Fast, strict, configurable, extensible, and beautiful linter for Go
+4 stars
from 5,556 · score 1.61
9.insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
+1 stars
from 553 · score 0.69
10.shinagawa-web / gomarklint
Catch broken links before your readers do.
+1 stars
from 19 · score 0.69