bhuvi11 Goto Github PK

.allstar

actions

A set of GitHub actions for checking your projects for vulnerabilities

allstar_test

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

checkov

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

clair-scan

cli

dep-scan

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Integrates with various CI environments such as Azure Pipelines, CircleCI, Google CloudBuild. No server required!

dependency-check-py

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

docker_action

dvna

Damn Vulnerable NodeJS Application

dvpwa

Damn Vulnerable Python Web App

dvra

Damn Vulnerable Rails app

ecom-service

ecom-service-1

Sample CRUD Operations of Spring Boot Microservice

ecom-service1

example

Go example projects

fooworld

My example web app that contains multiple vulnerabilities to analyze with OWASP Dependency-Check

github-codescan

gitpython

GitPython is a python library used to interact with Git repositories.

govwa

helloworld

intentionally-vulnerable-golang-project

This is a project we created that has dependencies with vulnerabilities, for us to test out nancy

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

kaniko

Build Container Images In Kubernetes

lets-be-bad-guys

A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10

macro_automation

Macro_automation

mango

Distributed ORM Framework for Java

maven-app

ninja

Ninja is a full stack web framework for Java. Rock solid, fast and super productive.