Local-first dependency security for AI coding agents. Pre-install package gating, typosquat and malicious-package detection, behavioral drift signals, and advisory scanning for npm, Python, Go, Rust, and Composer — as a Claude Code and Codex plugin.
- Language
- Python
- Licence
- MIT
- Stars
- 0
- Last push
- 2026-11-05
- Indexed
- 2026-11-08
claude-codecodexdependency-scanningnpmpypisecurity-toolssupply-chain-securityvulnerability-scanner
Source: GitHub repository metadata.
GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.
- Language
- TypeScript
- Licence
- MIT
- Stars
- 153
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
chaindropcode-scanningcredential-theftdependency-scanningdevsecopsgithub-actiongithub-actionsioc
Source: GitHub repository metadata.
Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.
- Language
- Python
- Licence
- MIT
- Stars
- 266
- Last push
- 2026-11-06
- Indexed
- 2026-11-08
active-responseaiclaudecompliancecybersecuritydevsecopsincident-responsellm
Source: GitHub repository metadata.
Automated Snyk dependency vulnerability scanning for manuelaklenke.com — reports published to GitHub Pages
- Language
- Not specified
- Licence
- Not specified
- Stars
- 0
- Last push
- 2026-08-31
- Indexed
- 2026-11-08
ci-cddependency-scanninggithub-actionsscasecuritysnykvulnerability-scanning
Source: GitHub repository metadata.
Curso para aprender Ciberseguridad desde cero, en español y 100% gratis. Abarca 5 dominios fundamentales que necesitas conocer para poder dar tus primeros pasos en este apasionante mundo.
- Language
- Not specified
- Licence
- Apache-2.0
- Stars
- 130
- Last push
- 2023-05-27
- Indexed
- 2026-11-08
access-controlbackupciberseguridadcybersecuritydisaster-recoveryfundamentalsincident-responsenetwork-security
Source: GitHub repository metadata.
A curated list of tools, frameworks, and resources for IT compliance, security standards, and regulatory requirements
- Language
- Astro
- Licence
- CC0-1.0
- Stars
- 115
- Last push
- 2026-01-15
- Indexed
- 2026-11-08
awesomeawesome-listcompliancecybersecurityesgfedramgouvernancegrc
Source: GitHub repository metadata.
Automatically capture and surface your team's tribal knowledge
- Language
- Go
- Licence
- MIT
- Stars
- 465
- Last push
- 2025-01-28
- Indexed
- 2026-11-08
aiautomationcharmbraceletclidevopsdevtoolgogolang
Source: GitHub repository metadata.
DevSecOps security pipeline with GitLab CI/CD, Semgrep, Gitleaks, npm audit, Docker, and Trivy.
- Language
- JavaScript
- Licence
- Not specified
- Stars
- 0
- Last push
- 2026-06-12
- Indexed
- 2026-11-08
application-securityappseccontainer-securitycybersecurity-portfoliodependency-scanningdevsecopsdockergitlab-ci
Source: GitHub repository metadata.
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
- Language
- Go
- Licence
- BSD-3-Clause
- Stars
- 6,194
- Last push
- 2024-07-12
- Indexed
- 2026-11-08
0dayattackautobrute-forcebugbountybugbounty-toolsgolanghacker
Source: GitHub repository metadata.
This repo contains the ENF-WHU audio recording dataset collected around Wuhan University campus and the MATLAB programs for electronic network frequency (ENF) detection, enhancement, and robust estimation, in ENF-based audio forensic applications.
- Language
- MATLAB
- Licence
- MIT
- Stars
- 37
- Last push
- 2023-07-27
- Indexed
- 2026-11-08
audio-processingdigital-forensicsmultimedia-forensicssignal-enhancementtime-frequency-analysis
Source: GitHub repository metadata.
A self-hosted dead man's switch for delivering encrypted messages (E2EE) to your loved ones — when you're gone or unresponsive.
- Language
- Ruby
- Licence
- MIT
- Stars
- 759
- Last push
- 2026-11-02
- Indexed
- 2026-11-08
cryptographye2eeencryptionend-to-end-encryptionopen-sourceprivacyprivacy-toolsself-hosted
Source: GitHub repository metadata.
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
- Language
- Python
- Licence
- MIT
- Stars
- 2,013
- Last push
- 2026-11-06
- Indexed
- 2026-11-08
apikeycodecredentialsdevsecopskeyleakprecommitscanning
Source: GitHub repository metadata.
Agentic AI for DevSecOps: Transforming Security with GitHub Advanced Security and GitHub Copilot. GitHub Advanced Security - DevSecOps Guidelines - Unified visibility into DevOps security posture. DevSecOps E2E Demos.
- Language
- HTML
- Licence
- MIT
- Stars
- 24
- Last push
- 2026-10-08
- Indexed
- 2026-11-08
advanced-securityagentic-devsecopsappsecappsecurityaspnet-corecode-scanningcontainer-scanningcontinuous-scanning
Source: GitHub repository metadata.
Find secrets with Gitleaks 🔑
- Language
- Go
- Licence
- MIT
- Stars
- 30,770
- Last push
- 2026-10-28
- Indexed
- 2026-11-08
ai-poweredci-cdcicdclidata-loss-preventiondevsecopsdlpgit
Source: GitHub repository metadata.
Protect your secrets using Gitleaks-Action
- Language
- JavaScript
- Licence
- Not specified
- Stars
- 676
- Last push
- 2026-10-14
- Indexed
- 2026-11-08
actionactionsgithubgithub-actionssecret-scannersecret-scanningsecretssecurity
Source: GitHub repository metadata.
The antivirus for OpenClaw — approve dangerous actions, scan skills, block secret leaks, and keep humans in control, for safety.
- Language
- TypeScript
- Licence
- Not specified
- Stars
- 87
- Last push
- 2026-03-20
- Indexed
- 2026-11-08
agent-securityai-securityaudit-logscybersecuritydata-loss-preventionguardrailshuman-in-the-loopllm-security
Source: GitHub repository metadata.
Open-source field manual for OSINT, DFIR and cybersecurity investigations. Operational SOPs, browsable online or clonable as an Obsidian vault.
- Language
- Shell
- Licence
- MIT
- Stars
- 67
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
blockchain-investigationbug-bountycryptographyctfcybersecuritydfirdigital-forensicsincident-response
Source: GitHub repository metadata.
Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 25
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
appsecci-cd-securitycicddevopsdevsecopsgitlabgitlab-cigo
Source: GitHub repository metadata.
Penguin OS Forensic (or Flight) Recorder
- Language
- Perl
- Licence
- GPL-2.0
- Stars
- 41
- Last push
- 2026-03-27
- Indexed
- 2026-11-08
cyber-protectioncyber-threat-intelligencecybersecuritydfirdigital-forensicsincident-responseintrusion-detectionlinux
Source: GitHub repository metadata.
One deterministic gate for your two riskiest moments: the terraform apply that reshapes your cloud, and the dependency you're about to install.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 2
- Last push
- 2026-08-24
- Indexed
- 2026-11-08
claude-codeclicontinuous-integrationdependency-scanningdevsecopsgemini-cligolangguardrails
Source: GitHub repository metadata.