umutbb Goto Github PK

rubocop

A Ruby static code analyzer and formatter, based on the community Ruby style guide.

ruby-lint

Moved to https://gitlab.com/yorickpeterse/ruby-lint

rubycritic

A Ruby code quality reporter

runv

Hypervisor-based Runtime for OCI

safety

Safety checks your installed dependencies for known security vulnerabilities

saltstack-cis-module

CIS security audit execution module

scoutsuite

Multi-Cloud Security Auditing Tool

secure_headers

Manages application of security headers with many safe defaults

security_monkey

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

serverless-goat

OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws

seyren

An alerting dashboard for Graphite

simp

A system automation and configuration management stack targeted toward operational flexibility and policy compliance.

slsa

spotbugs

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

static-analysis

A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.

statsd

Daemon for easy but powerful stats aggregation

statsd_spec

A quixotic quest to coordinate StatsD implementations

stig

STIG modules for Puppet (originally forked from Fedora Aqueduct)

streamalert

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

stylecopanalyzers

An implementation of StyleCop rules using the .NET Compiler Platform

swiftlint

A tool to enforce Swift style and conventions.

talisman

By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

terratest

Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.

tflint

A Pluggable Terraform Linter

tfsec

🔒🌍 Security scanner for your Terraform code

todo-app-java-on-azure

Sample TODO app using Java on Azure

top-10-cicd-security-risks

trivy

A Simple and Comprehensive Vulnerability Scanner for Container Images, Git Repositories and Filesystems. Suitable for CI

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history