vwasthename Goto Github PK

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

checkov

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

firefly-iii

Firefly: a personal finances manager

gitleaks

Scan git repos (or files) for secrets using regex and entropy 🔑

gosec

Golang security checker

iaf

The Ibis Adapter Framework is an easy to use, stateless integration framework which allows (transactional) messages to be modified and exchanged between different systems.

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

kubesec

Security risk analysis for Kubernetes resources

kubestriker

A Blazing fast Security Auditing tool for Kubernetes

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

test

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

vulsctl

Easy setup tool for Vuls