zippyopstraining Goto Github PK

awx

bundler-audit

Patch-level verification for Bundler

burp-rest-api

REST/JSON API to the Burp Suite security tool.

burpsuite

BurpSuite

chef-solo

clairctl

Tracking container vulnerabilities with Clair Control for CoreOS Clair

dawnscanner

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

devaudit

Open-source, cross-platform, multi-purpose security auditing tool

dive

A tool for exploring each layer in a docker image

drheader

drHEADer helps with the audit of security headers received in response to a single request or a list of requests.

eslint

Find and fix problems in your JavaScript code.

gosec

Golang security checker

grype

A vulnerability scanner for container images and filesystems

inspec

InSpec: Auditing and Testing Framework

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

kubernetes-autoscaling

kubernetes-hpa

Demo repo for tutotial articles on Opensource.com

learn-terraform-github-actions

mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

myjdbc

nikto

Nikto web server scanner

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

phpcs-security-audit

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

prowler

Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

puppetarameterizedmodules

puppetfact

puppetloops

puppetvariables

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities