ggshieldFind and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.
Stars: ✭ 1,272 (+5430.43%)
SecurecodeboxsecureCodeBox (SCB) - continuous secure delivery out of the box
Stars: ✭ 279 (+1113.04%)
ArcherysecCentralize Vulnerability Assessment and Management for DevSecOps Team
Stars: ✭ 1,802 (+7734.78%)
ChopchopChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.
Stars: ✭ 227 (+886.96%)
lunasecLunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Stars: ✭ 1,261 (+5382.61%)
td-redis-operator一款强大的云原生redis-operator,经过大规模生产级运行考验,支持分布式集群、支持主备切换等缓存集群解决方案…The powerful cloud-native redis-operator, which has passed the test of large-scale production-level operation, supports distributed clusters and active/standby switching ...
Stars: ✭ 327 (+1321.74%)
mloperatorMachine Learning Operator & Controller for Kubernetes
Stars: ✭ 85 (+269.57%)
cscannerAn open source, multi-cloud DevSecOps compliance checker
Stars: ✭ 19 (-17.39%)
gitavscanGit Anti-Virus Scan Action - Detect trojans, viruses, malware & other malicious threats.
Stars: ✭ 23 (+0%)
kubereplaySeamless integration of goReplay and Kubernetes
Stars: ✭ 30 (+30.43%)
nifikopThe NiFiKop NiFi Kubernetes operator makes it easy to run Apache NiFi on Kubernetes. Apache NiFI is a free, open-source solution that support powerful and scalable directed graphs of data routing, transformation, and system mediation logic.
Stars: ✭ 122 (+430.43%)
prancer-compliance-testThis repository includes cloud security policies for IaC and live resources.
Stars: ✭ 32 (+39.13%)
cloudformation-operatorA Kubernetes operator for managing CloudFormation stacks via a CustomResource
Stars: ✭ 98 (+326.09%)
cluster-image-scannerDiscover vulnerabilities and container image misconfiguration in production environments.
Stars: ✭ 43 (+86.96%)
cfngoatCfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Stars: ✭ 70 (+204.35%)
Batch-AntivirusBatch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.
Stars: ✭ 26 (+13.04%)
OpenLibreNFCAn app to modify and read memory in the Libre blood glucose monitor.
Stars: ✭ 45 (+95.65%)
kubeflareA Kubernetes Operator to manage Cloudflare settings via a declarative Kubernetes API
Stars: ✭ 50 (+117.39%)
reconmapVulnerability assessment and penetration testing automation and reporting platform for teams.
Stars: ✭ 242 (+952.17%)
abstract-operatorLibrary/SDK for creating the operators for Kubernetes and Openshift.
Stars: ✭ 60 (+160.87%)
aws-firewall-factoryDeploy, update, and stage your WAFs while managing them centrally via FMS.
Stars: ✭ 72 (+213.04%)
workshop-devsecopsLa intención de la workshop es mostrar y orientar a los equipos de desarrollo, seguridad y devops (entre otros) que quieran comenzar en DevSecOps, a segurar sus aplicaciones o bien a conocer un poco más acerca del desarrollo seguro, para esto, estaremos otorgando algunos tips e información que fuimos aprendiendo para armar un Pipeline DevSecOps …
Stars: ✭ 14 (-39.13%)
tfquerytfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
Stars: ✭ 297 (+1191.3%)
cdkgoatCdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Stars: ✭ 27 (+17.39%)
iOScanXiOScanX (iOS Application Scanner for OS X) is a Cocoa application for semi-automated iOS app analysis and evaluation
Stars: ✭ 33 (+43.48%)
MixewayHubMixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project contain one click docker-compose file which configure and run images from docker hub.
Stars: ✭ 80 (+247.83%)
mysql-operatorAsynchronous MySQL Replication on Kubernetes using Percona Server and Openark's Orchestrator.
Stars: ✭ 810 (+3421.74%)
urlscan👀 Analyze Websites and Resources They Request
Stars: ✭ 21 (-8.7%)
ochrona-cliA command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs
Stars: ✭ 46 (+100%)
iSecureOSAn iOS Security assessment app for jailbroken iOS Devices.
Stars: ✭ 111 (+382.61%)
pulsar-operatorPulsar Operator creates/configures/manages pulsar clusters atop Kubernetes
Stars: ✭ 68 (+195.65%)
grafana-operatorAn operator for Grafana that installs and manages Grafana instances, Dashboards and Datasources through Kubernetes/OpenShift CRs
Stars: ✭ 449 (+1852.17%)
knxmapKNXnet/IP scanning and auditing tool for KNX home automation installations.
Stars: ✭ 97 (+321.74%)
varnish-operatorRun and manage Varnish clusters on Kubernetes
Stars: ✭ 47 (+104.35%)
oracle-database-operatorThe Oracle Database Operator for Kubernetes (a.k.a. OraOperator) helps developers, DBAs, DevOps and GitOps teams reduce the time and complexity of deploying and managing Oracle Databases. It eliminates the dependency on a human operator or administrator for the majority of database operations.
Stars: ✭ 74 (+221.74%)
dohq-ai-best-practicesВнедрение и эксплуатация PT Application Inspector. Подробнее: https://habr.com/ru/company/pt/blog/557142/
Stars: ✭ 22 (-4.35%)
k6-operatorAn operator for running distributed k6 tests.
Stars: ✭ 170 (+639.13%)
secure-pipeline-advisorImprove your code security by running different security checks/validation in a simple way.
Stars: ✭ 25 (+8.7%)
kubectlsafeSafe operations in kubectl with plugin kubectlsafe
Stars: ✭ 36 (+56.52%)
gitleaksProtect and discover secrets using Gitleaks 🔑
Stars: ✭ 10,520 (+45639.13%)
NetworkAlarmA tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, and shellshock attacks. Currently supports live monitoring and network capture (pcap) scanning.
Stars: ✭ 17 (-26.09%)
coreAn advanced and highly optimized Java library to build frameworks: it's useful for scanning class paths, generating classes at runtime, facilitating the use of reflection, scanning the filesystem, executing stringified source code and much more...
Stars: ✭ 100 (+334.78%)
DongTai-agent-javaJava Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.
Stars: ✭ 592 (+2473.91%)
mapi-action🤖 Run a Mayhem for API scan in GitHub Actions
Stars: ✭ 16 (-30.43%)
awesome-policy-as-codeA curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
Stars: ✭ 121 (+426.09%)
OffensiveCloudDistributionLeverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.
Stars: ✭ 86 (+273.91%)
PerspecScriptable desktop app to correct the perspective of images
Stars: ✭ 523 (+2173.91%)
OctopusOctopus - Network Scan/Infos & Web Scan
Stars: ✭ 25 (+8.7%)
kubexrayJFrog KubeXray scanner on Kubernetes
Stars: ✭ 22 (-4.35%)
kotaryManaging Kubernetes Quota with confidence
Stars: ✭ 85 (+269.57%)
docusAndroid application for scanning and managing documents.
Stars: ✭ 39 (+69.57%)
KubeContextMac MenuBar App for Switching your K8s Context
Stars: ✭ 15 (-34.78%)
NETNOOBA simple program written in bash that contains basic Linux network tools, information gathering tools and scanning tools.
Stars: ✭ 105 (+356.52%)