#security

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

.NET library used to integrate with Descope

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard) and Kubescape.

Official IVPN Desktop app

A powerful obfuscator for JavaScript and Node.js

Secure Boot & Measured Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]

Rust implementation of the Messaging Layer Security (MLS) protocol

OXO is a security scanning orchestrator for the modern age.

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Keeper Secrets Manager is a cloud-based, zero-knowledge platform for securing infrastructure secrets. Provides automatic password rotation and integration into popular DevOps CI/CD tools.

OWASP Foundation web repository

JavaScript toolchain for working with WebAssembly Components

Searchable, application-level encryption for building privacy-first apps

Dradis Framework: Collaboration and reporting for IT Security teams

ESLint rules for Node Security

The authentication glue you need.

Your sats. Your privacy. Your profit.

safely install npm packages by auditing them pre-install stage

Sandbox any AI agent in seconds - zero setup, zero latency.

isolated bosh jobs

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

A Rust port of shadowsocks

Rust KeePass database file parser for KDB, KDBX3 and KDBX4, with experimental support for KDBX4 writing.

Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.

Modular TypeScript SDK for the ADAMANT blockchain and deterministic wallet helpers

Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).