Go · npm
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
MIT2026年7月19日 · 指标 2.10.0
全部标签
目录标签
#devsecops
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
86 条记录
PyPI
thothforge/thothctl
A command line interface tool designed for efficient management and automation within your internal developer platform.
自定义许可证2026年7月19日 · 指标 2.10.0
Go
rudrendupaul/tenantguard
CLI security scanner for self-hosted multi-tenant AI-agent platforms. 16 fail-closed OPA/Rego rules catch tenant-isolation defects (sandbox scoping, SSRF, cross-tenant cron/auth, secret leakage). SARIF and JSON output for CI.
Apache-2.02026年7月15日 · 指标 2.10.0
npm
Vinay-O/slopscore
Scan your codebase for AI slop. Get a Slop Score. Ship clean. A zero-dependency CLI (85 detectors: security, performance, code-quality, design tells) + a 181-pattern Anti-Slop Protocol for AI coding agents.
MIT2026年9月6日 · 指标 2.10.0
PyPI · crates.io · Maven +2
mattybellx/ansede
Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
自定义许可证2026年7月17日 · 指标 2.10.0
PyPI
Mehrdoost/devsecops-radar
🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.
自定义许可证2026年7月17日 · 指标 2.10.0
Go
sairintechnologycom/pkgsafe
Supply-chain firewall for AI coding agents and developers — checks npm/PyPI packages against OSV advisories, typosquat & lifecycle-script heuristics, and your policy before install. Local-first, MCP-native.
MIT2026年7月15日 · 指标 2.10.0
PyPI
Akunimal/AI-Router-Blocker-AiO
Open-source DevSecOps gateway for AI traffic. Intercept, audit, and route LLM requests to prevent data leaks and enforce zero-trust security policies.
自定义许可证2026年7月26日 · 指标 2.10.0
npm
sudoeren/arhus
local-first security analysis for TypeScript & JavaScript
MIT2026年7月17日 · 指标 2.10.0
PyPI · npm
wang-jie-git/moat
AI Coding Gatekeeper — Zero-config, real-time guardrails for AI-generated code. 零配置AI编码守门员，实时拦截架构/安全/回归问题。
Apache-2.02026年7月19日 · 指标 2.10.0
Go
opscart/opscart-k8s-watcher
Kubernetes operational triage dashboard. Surfaces CrashLoops, security gaps, orphaned resources, and cost waste — tells you what to fix first. Read-only, no agents, no cloud credentials.
MIT2026年8月20日 · 指标 2.10.0
npm
nsasoft/nsauditor-ai
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.
MIT2026年9月6日 · 指标 2.10.0
PyPI
vishnu-77/secchecker
该仓库未发布描述。
MIT2026年7月22日 · 指标 2.10.0
Go · PyPI
Zayan-Mohamed/secscan
SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.
MIT2026年7月20日 · 指标 2.10.0
Go
rubysolo/envisible
Encrypt secrets inline in your config and .env files with ENC[…] markers — local keypair or GCP/AWS/Azure KMS. Safe to commit. Ships a setup skill for AI coding agents.
MIT2026年7月17日 · 指标 2.10.0
RubyGems
OWASP/www-project-eks-goat
OWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.
GPL-3.02026年8月4日 · 指标 2.10.0
Go
wille/gh-actions-cli
Harden and manage your GitHub Actions: SHA-pin every action, enforce allowlist policies, update interactively, and analyze run health
MIT2026年7月17日 · 指标 2.10.0
PyPI
TariqDreamsTech/ranbval-sdk
Secrets that refuse to be stolen. Sealed API keys that decrypt only on your allowlisted repo — and raise a security error if anything tries to print, iterate, or read them. Every access attempt alerts the owner.
MIT2026年7月20日 · 指标 2.10.0
Go
malandas/andas
Sift real security risk from the noise — a cross-platform CLI that live-validates leaked secrets and reachability-ranks npm/Yarn vulnerabilities, so you fix what's actually exploitable.
MIT2026年8月6日 · 指标 2.10.0
Go
zuhayrb/dexpose
Pure-Go CLI that scans APK files for leaked secrets. Zero dependencies, gitleaks-compatible rules, CI-friendly exit codes.
MIT2026年9月5日 · 指标 2.10.0
Go
FYFran/ironwall
8-step open-source security audit CLI. Secrets, SAST, dependency CVEs, IaC, supply chain. MIT. AI-assisted.
MIT2026年9月6日 · 指标 2.10.0
Go
tamish560/mcprobe
Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go stdlib only.
MIT2026年7月20日 · 指标 2.10.0
npm
react-atomic/modality
该仓库未发布描述。
无许可证2026年7月17日 · 指标 2.10.0
—
PortSwigger/dastardly-github-action
Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.
无许可证2026年8月4日 · 指标 2.10.0
PyPI
FuzzingLabs/secpipe
MCP server for AI-driven security pipelines
自定义许可证2026年8月4日 · 指标 2.10.0
PyPI
dmdhrumilmistry/offat
Tests your API automatically for common API vulnerabilities. Project is still Work In Progress. PRs are appreciated.
MIT2026年8月7日 · 指标 2.10.0