awesome-threat-modelling by hysnsec
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
updated at May 5, 2024, 2:07 p.m.
flawfinder by david-a-wheeler
a static analysis tool for finding vulnerabilities in C/C++ source code
updated at May 5, 2024, 2:04 p.m.
harden-runner by step-security
Network egress filtering and runtime security for GitHub-hosted and self-hosted runners
updated at May 5, 2024, 2:03 p.m.
ansible-lint by ansible
ansible-lint checks playbooks for practices and behavior that could potentially be improved and can fix some of the most common ones for you
updated at May 5, 2024, 12:59 p.m.
conftest by open-policy-agent
Write tests against structured configuration data using the Open Policy Agent Rego query language
updated at May 5, 2024, 10:47 a.m.
repo-supervisor by auth0
Scan your code for security misconfiguration, search for passwords and secrets. 
updated at May 5, 2024, 6:14 a.m.
checkov by bridgecrewio
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
updated at May 5, 2024, 6 a.m.
trivy by aquasecurity
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
updated at May 5, 2024, 2:31 a.m.
ThreatMapper by deepfence
Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.
updated at May 5, 2024, 2:21 a.m.
security-code-scan by security-code-scan
Vulnerability Patterns Detector for C# and VB.NET
updated at May 5, 2024, 1:53 a.m.
kube-score by zegl
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
updated at May 4, 2024, 11:48 p.m.
docker-bench-security by docker
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
updated at May 4, 2024, 10:38 p.m.
juice-shop by juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
updated at May 4, 2024, 9:28 p.m.
netz by SpectralOps
Discover internet-wide misconfigurations while drinking coffee
updated at May 4, 2024, 7:53 p.m.