#security

Line-based testcase reducer

Take full advantage of Nano Library to rapidly build enriched .NET microservices.

Woodpecker CI secret extension federating pipeline identity to HashiCorp Vault / OpenBao

Applies Magento 2 / Adobe Commerce security patches, verifies they stay applied, and fails the build when they do not

A Laravel package to scrub sensitive information that breaks operational security policies from being leaked on accident or not by developers.

Agent control plane for governed AI coding: validate changes, enforce policy gates, track findings, proofs, and evals based on your habits.

CryptoLyzer is a fast, flexible and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI. (read-only clone of the original GitLab project)

Native cloud infrastructure for automatically running ScubaGear/ScubaGoggles

Cisco AI Defense middleware for LangChain agents

Self-hosted Kubernetes image intake gateway: mirror → Trivy scan → CEL policy → Sigstore attestations. Admit only what passed.

SSRF protection for the JVM — whitelist + private-IP filter + redirect re-validation + LLM-agent tool URL validation (Spring AI + LangChain4j). Modules for RestClient, RestTemplate, WebClient (reactor-netty DNS-time), Feign, Spring AI, LangChain4j, OkHttp, JDK HttpClient, Apache HttpClient 5. GraalVM native-image hints included.

GateForge is an open-source Identity and Access Management (IAM) platform providing secure authentication, authorization, OAuth 2.0, OpenID Connect, SSO, MFA, Passkeys, Organizations, and developer-friendly APIs.

Cloud-agnostic Terraform IAM policy validator — pre-apply check that ensures your deploy role has the permissions required by every resource in the plan.

该仓库未发布描述。

模块化的 Go 工具集，提供文件与 IO 辅助、模板函数、HTTP 中间件、文件存储驱动（本地/MinIO/FTP/SFTP/HDFS）、数据库 DSN 与查询构造、规则引擎验证、锁定策略与安全组件、日志封装等，适合加速后端服务与工具开发。

security

Server-Side Request Forgery (SSRF) protection plugin for HTTPlug

go-transcrypt provides functionality to encrypt arbitrary data into a hex encoded string for safe on-disk storage

Deterministic security & quality gate engine for git repos. Installs pre-commit/pre-push hooks that run secret scanning (gitleaks), SAST (semgrep/OWASP), linting (ruff/eslint), type checks, dependency audits, and tests — security findings block, quality issues warn. Event-sourced findings ledger, one-command setup: aramid init <repo>.

Static MUST-clause compliance checker for SPIFFE artifacts (SPIFFE-ID, X.509-SVID, JWT-SVID, WIT-SVID, trust bundle, bundle map). Text, JSON, or SARIF output — every failure cites the spec section.

Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)

Secure, dependency-light inbound and outbound webhook runtime for Go, with optional durable PostgreSQL delivery.

Laravel Vet is a dependency audit for PHP.

Community-maintained fork of image-size with fixes for CVE-2025-71329 and CVE-2025-71330

Automatic security vulnerability remediation for your code.

Agent Tool Protocol

Django security: IP/country/email blocking, rate-limit logging, GeoIP, django-axes lockout

Allows you to easily create a sandboxed Twig environment where you can control what tags, filters, functions, and object methods/properties are allowed

Go SSH Agent and utilities

P6M7G8: AWS CDK Construct that makes an OIDC Provider for GitHub Actions