Go
jitpass/jit
Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.
Власна ліцензія22 жовт. 2026 р. · метрики 2.10.0
Усі теги
Тег каталогу
#devsecops
Усі репозиторії публічного реєстру з цим тегом — із тем GitHub або ключових слів, які публікують їхні реєстри пакетів. Здоров'я вимірюється за тією ж версіонованою методологією, що й решта реєстру.
121 запис
PyPI
shcherbak-ai/tethered
tethered - Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.
MIT14 жовт. 2026 р. · метрики 2.10.0
npm
this-is-securl/securl
SecURL - passive external security posture scanner. Free hosted scanner, open-source engine, CI integration
MIT8 вер. 2026 р. · метрики 2.10.0
npm · Go
HodeTech/Leakwatch
High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
MIT14 вер. 2026 р. · метрики 2.10.0
Go
TomTonic/extract-sbom
Sandboxed SBOM extraction from arbitrary artifacts. Outputs traceability records and CycloneDX JSON for automation, auditability, and supply chain security.
BSD-3-Clause12 вер. 2026 р. · метрики 2.10.0
npm
adamsjack711-ux/pkgxray
Pre-install security for AI agents, npm packages, and MCP servers. Zero-dep local static analysis; normal scans never execute package code.
MIT10 вер. 2026 р. · метрики 2.10.0
PyPI
ajinabraham/njsscan
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
LGPL-3.021 вер. 2026 р. · метрики 2.10.0
Go
kondukto-io/kdt
CLI to interact with Kondukto
GPL-3.08 вер. 2026 р. · метрики 2.10.0
Go
idriss-eliguene/landlock-genprof
Automatic Kubernetes security profile generator — Landlock, NetworkPolicy, seccomp, and Linux capabilities — built on observation of a running pod, not manual rule authoring.
Apache-2.021 жовт. 2026 р. · метрики 2.10.0
—
mukul975/Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Apache-2.016 вер. 2026 р. · метрики 2.10.0
PyPI
philpaz/recusal
Deterministic governance for Claude and MCP tool calls. Pin approved capabilities, detect drift, and refuse unsafe or unapproved actions before execution. No model in the decision path.
Apache-2.014 вер. 2026 р. · метрики 2.10.0
Go
plenoai/pleno-dlp
Unified DLP scanner for secrets and PII across filesystem, git, stdin, and SaaS sources.
AGPL-3.010 вер. 2026 р. · метрики 2.10.0
PyPI
vishnu-77/secchecker
Static security scanner for AI agents, MCP tools, and LLM applications. Detects OWASP LLM Top 10 risks, unsafe tool use, prompt injection paths, secrets, and AI infrastructure misconfigurations. Zero runtime dependencies.
MIT12 вер. 2026 р. · метрики 2.10.0
Go
eitanity/kanonarion
Dependency assurance software for Go. A deterministic, local source of truth about your dependencies - what's in them, how they're licensed, how to call them, and which known vulnerabilities your code actually reaches. Developers query it from the CLI with human-readable output; AI coding agents get JSON.
Apache-2.011 вер. 2026 р. · метрики 2.10.0
Go
tiagosilva07/zyrax-guard
Audit your AI agent configs before you run them — prompt injection, rogue MCP servers, credential-exfil. Plus dependency vetting.
MIT20 жовт. 2026 р. · метрики 2.10.0
npm
Francosimon53/verification-layer
Open-source HIPAA compliance scanner for healthcare code. 140+ rules, 5 HIPAA categories. CLI + CI/CD + VS Code.
MIT16 жовт. 2026 р. · метрики 2.10.0
npm · PyPI
glferreira-devsecops/Cascavel
🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.
Власна ліцензія19 вер. 2026 р. · метрики 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MIT14 вер. 2026 р. · метрики 2.10.0
PyPI
toniantunovi/lucidshark
Ship AI-generated code without the fear
Apache-2.019 вер. 2026 р. · метрики 2.10.0
Go · PyPI
RudrenduPaul/TenantGuard
Tenant-isolation security scanner for self-hosted multi-tenant AI-agent platforms. SARIF, JSON, and MCP output.
Apache-2.08 вер. 2026 р. · метрики 2.10.0
Go
kanywst/brtc
Cost calculator for offline password brute-force attacks: time + USD per GPU profile, with a CI gatekeeper.
MIT13 вер. 2026 р. · метрики 2.10.0
npm
subodhkc/ai-appsec
Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.
MIT20 вер. 2026 р. · метрики 2.10.0
npm
KirtashDev/dephawk
🦅 Catch npm dependencies red-handed at runtime — see & block when one reads your SSH keys, steals secrets, or phones home.
MIT18 вер. 2026 р. · метрики 2.10.0
Go
opscart/opscart-k8s-watcher
Kubernetes operational triage dashboard. Surfaces CrashLoops, security gaps, orphaned resources, and cost waste — tells you what to fix first. Read-only, no agents, no cloud credentials.
MIT19 жовт. 2026 р. · метрики 2.10.0
Go · npm
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
MIT11 вер. 2026 р. · метрики 2.10.0
PyPI
thothforge/thothctl
A command line interface tool designed for efficient management and automation within your internal developer platform.
Власна ліцензія11 вер. 2026 р. · метрики 2.10.0
Hex
aryaminus/controlkeel
Agent control plane for governed AI coding: validate changes, enforce policy gates, track findings, proofs, and evals based on your habits.
Власна ліцензія9 вер. 2026 р. · метрики 2.10.0
Go
famclaw/honeybadger
Security scanner for AI agent skills and MCP servers. Detects secrets, CVEs, supply chain attacks, and prompt injection in SKILL.md files before they're installed. Pre-install gate for Claude Code, OpenClaw, PicoClaw, NanoBot, FamClaw, and CI/CD pipelines. Single Go binary, MIT licensed.
MIT9 вер. 2026 р. · метрики 2.10.0
PyPI
jared0565/aramid
Deterministic security & quality gate engine for git repos. Installs pre-commit/pre-push hooks that run secret scanning (gitleaks), SAST (semgrep/OWASP), linting (ruff/eslint), type checks, dependency audits, and tests — security findings block, quality issues warn. Event-sourced findings ledger, one-command setup: aramid init <repo>.
MIT18 вер. 2026 р. · метрики 2.10.0
npm
subodhkc/mcp-tenant-isolation
Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
MIT20 вер. 2026 р. · метрики 2.10.0