ci-cd-security Goto Github PK

arachni

Web Application Security Scanner Framework

asvs

Application Security Verification Standard

awesomecicdsecurity

bandit

Bandit is a tool designed to find common security issues in Python code.

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

bundler-audit

Patch-level verification for Bundler

burp-extender-api

Burp Extender API

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

clair

Vulnerability Static Analysis for Containers

cloud-discovery

Cloud Discovery provides a point in time enumeration of all the cloud native platform services

containerd

An open and reliable container runtime

crun

A fast and lightweight fully featured OCI runtime and C library for running containers

dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

dirb

Web Fuzzer

elisa-clanganalyzer

The Clang Static Analyzer is a source code analysis tool that finds bugs in C, C++, and Objective-C programs. Currently it can be run either from the command line or if you use macOS then within Xcode. When invoked from the command line, it is intended to be run in tandem with a build of a codebase. The analyzer is 100% open source and is part of the Clang project. Like the rest of Clang, the analyzer is implemented as a C++ library that can be used by other tools and applications.

elisa-coccinelle

Source code of the Coccinelle project (mirror of the main Coccinelle repository located at Inria)

elisa-codechecker

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

elisa-smatch

smatch repo mirror of git://repo.or.cz/smatch.git

elisa-sparse

git mirror for sparse

elisa-syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

eslint

Find and fix problems in your JavaScript code.

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

findbugs

The new home of the FindBugs project

flawfinder

a static analysis tool for finding vulnerabilities in C/C++ source code

garmr

Security Testing Tool

gauntlt

a ruggedization framework that embodies the principle "be mean to your code"

git-secrets

Prevents you from committing secrets and credentials into git repositories

glue

Application Security Automation

gosec

Golang security checker

infosec.mozilla.org

Guidelines, principles published on https://infosec.mozilla.org