Go
aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Apache-2.02026年10月6日 · 指标 2.10.0
全部标签
目录标签
#vulnerability
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
52 条记录
PyPI
anchore/vunnel
Tool for collecting vulnerability data from various sources (used to build the grype database)
Apache-2.02026年10月21日 · 指标 2.10.0
Go
anchore/grype
A vulnerability scanner for container images and filesystems
Apache-2.02026年8月27日 · 指标 2.10.0
Go · crates.io
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
GPL-2.02026年8月28日 · 指标 2.10.0
Go
guacsec/guac
GUAC aggregates software security metadata into a high fidelity graph database.
Apache-2.02026年10月19日 · 指标 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
自定义许可证2026年9月20日 · 指标 2.10.0
PyPI · npm
koda-ai-studio/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.02026年10月16日 · 指标 2.10.0
PyPI · npm
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.02026年9月8日 · 指标 2.10.0
Go · PyPI
anchore/grype-db
该仓库未发布描述。
Apache-2.02026年9月13日 · 指标 2.10.0
crates.io
rustsec/rustsec
RustSec API & Tooling
自定义许可证2026年10月20日 · 指标 2.10.0
—
greenbone/gvm-libs
Greenbone Vulnerability Management Libraries
GPL-2.02026年9月18日 · 指标 2.10.0
Go · npm
jfrog/frogbot
🐸 Scans your Git repository with JFrog Xray & JFrog advanced security for security vulnerabilities. 🤖
Apache-2.02026年9月11日 · 指标 2.10.0
npm
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MIT2026年9月9日 · 指标 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.02026年9月16日 · 指标 2.10.0
PyPI · npm
freelabz/secator
secator - the pentester's swiss knife
自定义许可证2026年9月18日 · 指标 2.10.0
Go
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
自定义许可证2026年9月11日 · 指标 2.10.0
—
mondoohq/installer
Linux, macOS and Windows Install scripts for cnquery & cnspec
自定义许可证2026年9月9日 · 指标 2.10.0
—
aquasecurity/trivy-action
Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
Apache-2.02026年9月15日 · 指标 2.10.0
PyPI
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
GPL-3.02026年10月21日 · 指标 2.10.0
PyPI
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Apache-2.02026年9月11日 · 指标 2.10.0
npm · crates.io
0sec-labs/foxguard
A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
MIT2026年9月10日 · 指标 2.10.0
Go
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
GPL-3.02026年9月19日 · 指标 2.10.0
—
greenbone/gvmd
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
AGPL-3.02026年9月10日 · 指标 2.10.0
Go
git-pkgs/vulns
Go library for fetching vulnerability data from multiple sources
MIT2026年9月15日 · 指标 2.10.0
npm
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
MIT2026年9月12日 · 指标 2.10.0
npm · PyPI
sinewaveai/agent-security-scanner-mcp
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
MIT2026年10月9日 · 指标 2.10.0
Go
vulncheck-oss/sdk-go-v2
A generated Go SDK from VulnCheck's OpenAPI specification
Apache-2.02026年10月19日 · 指标 2.10.0
npm
agentgg-dev/agentgg
Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.
Apache-2.02026年9月17日 · 指标 2.10.0
npm
goklab/guardvibe
Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.
Apache-2.02026年9月10日 · 指标 2.10.0
PyPI
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
MIT2026年9月10日 · 指标 2.10.0