All tags
Catalogue tag

#devsecops

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

61 records
Tagged “devsecops”Ranked by health index
Go
88Excellenthealth index
trufflesecurity/truffleHog
Find, verify, and analyze leaked credentials
Go★ 27K↓ 0/moJul 14, 2026
AGPL-3.0Jul 14, 2026 · metrics 1.13.0
PyPI · npm
86Excellenthealth index
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Python · TypeScript★ 14.1K↓ 50/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
85Excellenthealth index
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
Go★ 570Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
PyPI
82Goodhealth index
bancolombia/devsecops-engine-tools
Toolchain for the evaluation of different devsecops practices
Python★ 45↓ 0/moJul 14, 2026
AGPL-3.0Jul 14, 2026 · metrics 1.13.0
PyPI · npm
80Goodhealth index
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Python · TypeScript★ 28↓ 5,301/moJul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
Maven
79Goodhealth index
akto-api-security/akto
Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure
Java · JavaScript★ 1,489Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
PyPI
78Goodhealth index
cisco-open/forge
ForgeMT is a multi-tenant platform for self-hosted GitHub Actions runners on AWS. It gives platform teams an IaC-driven way to operate ephemeral EC2 runners and ARC/Kubernetes runner scale sets for many tenant repositories.
HCL · Python★ 210Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI · crates.io
78Goodhealth index
mongodb/kingfisher
Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 1,000+ rules.
Rust★ 1,174Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Go
77Goodhealth index
mindburn-labs/helm-ai-kernel
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Go · Java★ 53Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI
77Goodhealth index
pyupio/safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
Python★ 1,992↓ 4.7M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Go · npm
77Goodhealth index
safedep/pmg
PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
Go★ 464Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm · PyPI
76Goodhealth index
bunkerity/bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Python · Shell · HTML★ 10.7KJul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
Go · Maven
76Goodhealth index
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Go · Java★ 638Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
npm
75Goodhealth index
CyberStrikeus/CyberStrike
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
TypeScript · Python★ 1,266↓ 2,624/moJul 23, 2026
AGPL-3.0Jul 23, 2026 · metrics 1.13.0
Go
75Goodhealth index
mindburn-labs/helm-oss
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Go · Java★ 53Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
Go
74Goodhealth index
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Go★ 146Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
PyPI
74Goodhealth index
owasp/docksec
AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
Python★ 460Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
72Goodhealth index
l3montree-dev/flawfix
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Go★ 146Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
npm
71Goodhealth index
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
JavaScript · TypeScript · CSS★ 763↓ 2,247/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Go · PyPI
71Goodhealth index
bomly-dev/bomly-cli
Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.
Go★ 9Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI · npm
70Goodhealth index
hashgraph-online/hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Python · TypeScript · JavaScript★ 396Jul 15, 2026
Custom licenseJul 15, 2026 · metrics 1.13.0
PyPI
68Moderatehealth index
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Python★ 9↓ 1,928/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm
68Moderatehealth index
samartomar/ai-harness
Enterprise AI Bootstrapping Harness
TypeScript★ 4↓ 4,137/moJul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
Go
67Moderatehealth index
rezmoss/sbomlyze
git diff for your SBOM ,compare CycloneDX/SPDX/Syft bills of materials, detect tampering, and gate CI
Go★ 24Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
67Moderatehealth index
squid-protocol/gitgalaxy
Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.
Python★ 45↓ 0/moJul 14, 2026
Custom licenseJul 14, 2026 · metrics 1.13.0
Go
66Moderatehealth index
airomhq/airom
Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file:line evidence, load-time risk detection (poisoned pickle / Keras Lambda / unsafe torch.load) and NIST AI RMF / OWASP compliance mapping. CycloneDX · SARIF · JSON.
Go · MDX★ 8Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Go
66Moderatehealth index
cynative/cynative
Deep cybersecurity research agent for your cloud, code and runtime - ask your infrastructure anything. Read-only, sandboxed.
Go★ 87Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
Go · npm
66Moderatehealth index
opt-nc/geol
Efficiently show and monitor end-of-life dates for a number of products in your terminal and CI using endoflife.date API
HTML · Go★ 12Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Go
65Moderatehealth index
draugr-dev/draugr
Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.
Go★ 0Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Go
65Moderatehealth index
kondukto-io/kdt
CLI to interact with Kondukto
Go★ 29Jul 15, 2026
GPL-3.0Jul 15, 2026 · metrics 1.13.0