Awesome Open Source

Programming Languages

Search results for scanner devsecops

20 search results found

Trivy ⭐ 20,160

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Trufflehog ⭐ 13,788

Find and verify credentials

Tfsec ⭐ 6,548

Security scanner for your Terraform code

Terrascan ⭐ 4,500

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Dalfox ⭐ 3,047

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Nodejsscan ⭐ 2,275

nodejsscan is a static security code scanner for Node.js applications.

Archerysec ⭐ 2,162

Automate Your Application Security Orchestration And Correlation (ASOC) Using ArcherySec.

Ggshield ⭐ 1,474

Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.

Lunasec ⭐ 1,355

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunase

Noseyparker ⭐ 1,313

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

Cve Bin Tool ⭐ 997

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

Kube Scan ⭐ 734

kube-scan: Octarine k8s cluster risk assessment tool

Sast Scan ⭐ 697

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

Trivy Action ⭐ 613

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

Action Baseline ⭐ 280

A GitHub Action for running the ZAP Baseline scan

Chopchop ⭐ 245

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

Action Full Scan ⭐ 237

A GitHub Action for running the ZAP Full scan

Porch Pirate ⭐ 215

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

Checkov Action ⭐ 188

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

Anteater ⭐ 174

Anteater - CI/CD Gate Check Framework

Docker Security Images ⭐ 173

🔐 Docker Container for Penetration Testing & Security

Nmap Formatter ⭐ 165

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot) or sqlite. Simply put it's nmap converter.

Sonarqube Action ⭐ 131

Integrate SonarQube scanner to GitHub Actions

Sonar Secrets ⭐ 95

SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc..

Mixewayhub ⭐ 92

Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project contain one click docker-compose file which configure and run images from docker hub.

Kubelight ⭐ 76

OWASP Kubernetes security and compliance tool [WIP]

Intercept ⭐ 74

INTERCEPT / Policy as Code Auditing / SAST for Code & APIs

Bridgecrew Action ⭐ 72

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

Py Gitguardian ⭐ 68

Python API client library for the GitGuardian API

Snyk Security Scanner Plugin ⭐ 52

Test and monitor your projects for vulnerabilities with Jenkins. This plugin is officially maintained by Snyk.

Security Automation With Ansible 2 ⭐ 42

Ansible Playbooks for Security Automation with Ansible2 book

Prisma Cloud Scan ⭐ 41

GitHub action to scan container images with Palo Alto Networks' Prisma Cloud

Iac Scan Runner ⭐ 38

Service that scans your Infrastructure as Code for common vulnerabilities

Gitavscan ⭐ 36

Git Anti-Virus Scan Action - Detect trojans, viruses, malware & other malicious threats.

Curated list of security tools

Securecodebox V2 ⭐ 21

This Repository contains the stable beta preview of the next major secureCodeBox (SCB) release v2.0.0.

CLI to interact with Kondukto

Sslchecker ⭐ 15

SSLChecker is a serverless API written in Python and running on Azure Functions. SSLChecker is used to identify obsolete versions of SSL/TLS (e.g., SSL 3.0, and TLS 1.0/1.1), or perform a full scan to identify all supported versions of SSL/TLS on an endpoint.

Mixewaybackend ⭐ 12

Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayBackend project contains source code of backend with all plugin integrations writer in Spring Boot.

Actions Log4j ⭐ 11

A GitHub Action that scans your public web applications for log4j vulnerabilities after every deployment. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements.

Purpleteam App Scanner ⭐ 10

Application scanning component of OWASP PurpleTeam

Devsecops Template ⭐ 9

Set of security tools that can be integrated in Jenkins pipelines.

Credential Detector ⭐ 7

An easy-to-use and highly configurable tool that allows you to scan projects to detect potentially hard-coded credentials.

Appscan Plugin ⭐ 7

Veracodecommunitysca ⭐ 6

Seamlessly integrate Veracode Agent-Based SCA scans with Azure DevOps build or release pipelines.

Mixewayfrontend ⭐ 6

Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayFrontend contains source code of GUI created in Angular 8 and based on ngxadmin framework.

Container Security Testing ⭐ 5

A list of security testing tools for containerized applications

Helpful workflow templates for GitHub Actions at Bayer (needs to be public for the templates)

Related Searches

Python Scanner (3,809)

Java Scanner (1,470)

Javascript Scanner (1,359)

C Plus Plus Scanner (841)

Golang Scanner (733)

Security Scanner (732)

Shell Scanner (728)

Scanner Qrcode (727)

Vulnerabilities Scanner (707)

C Scanner (616)

1-20 of 20 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.