codacy-security Goto Github PK

benchmarkjava

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools.

bicepgoat

BicepGoat is Bridgecrew's "Vulnerable by Design" Bicep and ARM repository. BicepGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

cdkgoat

CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

cfngoat

Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable.

dvwa

Damn Vulnerable Web Application (DVWA)

example-package-dealer

Example package for use with the Swift Package Manager

gitlab-sast-rules

govwa

horusec-examples-vulnerabilities

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

kustomizegoat

Vulnerable Kustomize Kubernetes templates for training and education

lets-be-bad-guys

A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10

railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

rust-goat

Simple REST API with vulnerabilities written in Rust

sample_secrets

sbt-dependency-lock

sbt plugin for creating dependency lockfiles

semgrep-rules

Semgrep rules registry

supplygoat

"Vulnerable by Design" supply chain is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

vaas-cve-2014-6271

Vulnerability as a service: showcasing CVS-2014-6271, a.k.a. Shellshock

vulnerable-flask-app

Intentionally Vulnerable Flask app for use in Demos

webgoat.net

OWASP WebGoat.NET

wrongsecrets

Vulnerable app with examples showing how to not use secrets