Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
514 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).
androidapktoolcfrconcurrencydecompilerdecompiler-javaenjarifyfernflower
Source: GitHub repository metadata.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
compliancecontinuous-deliverycve-scanningcybersecuritydependency-analysisdevsecopsgdprlog4shell
Source: GitHub repository metadata.
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
active-directoryapi-pentestingappseccybersecuritydevsecopsmobile-penetration-testingnetworkingosint-resources
Source: GitHub repository metadata.
One secret mapping for local dev, CI/CD, and runtime. Envilder resolves cloud secrets from your own vaults without SaaS middlemen, duplicated config, or .env drift.
automationaws-ssmazure-keyvaultci-cdconfigurationdeveloper-toolsdotenvenvironment-variables
Source: GitHub repository metadata.
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
blueteamcloud-nativecloud-securitycloudsecuritycontainercontainer-securitydevsecopsdocker
Source: GitHub repository metadata.
Production-ready modular Unity framework: UE-inspired Gameplay Ability System, zero-GC core, HybridCLR hot-update, Luban config pipeline, data-driven build & atlas workflows. DI-friendly, deterministic, cross-platform, CI-ready. 生产级模块化 Unity 框架：类虚幻引擎 GAS 玩法能力系统 · 零 GC 核心 · HybridCLR 热更新 · Luban 配置管线 · 数据驱动构建与图集工作流。DI 友好 · 确定性构建 · 跨平台 · CI 就绪。
addressablesci-cdcross-platformcsharpdependency-injectiongame-developmentgame-frameworkgamedev
Source: GitHub repository metadata.
🛡️ Real security scans inside your AI coding agent — secrets, dependencies, SAST, IaC & licenses in one normalized report. Local-first Claude Code skill + plugin.
ai-coding-assistantclaude-codeclaude-code-plugindependency-scanningdevsecopssastsecrets-detectionsecurity
Source: GitHub repository metadata.
Audit Python dependencies for known vulnerabilities, license-policy risks, stale or yanked releases, and repository health.
dependency-auditdependency-scanninggithub-actionslicense-complianceosvpypipythonsarif
Source: GitHub repository metadata.
Cross-file security-audit agent skill — source→sink taint across files, supply-chain CVE audit via 18 scanners (vendored package-checker, npm/pnpm/yarn audit, grype, trivy, osv-scanner… + Syft SBOM), blue-team log forensics, EPSS/KEV risk ranking, adversarially verified findings in a cited report.
agent-skillai-agentappsecclaudecode-auditdependency-scanningdevsecopslog-analysis
Source: GitHub repository metadata.
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
archive-integritychat-archivechat-exportchat-privacyjsonloffline-scannerpersonal-data-scanningprivacy-audit
Source: GitHub repository metadata.
Keeps secrets and PII out of the cloud model. Hook plugin for Claude Code/Codex with a local vault.
agent-skillsclaude-codeclaude-code-plugincodex-pluginpiiprivacyredactionsecret-scanning
Source: GitHub repository metadata.
Pre-commit supply-chain guard: blocks typo-squatted, unpinned, and vulnerable dependencies before they enter a commit, whether added by a human or a coding agent.
clidependency-scanningdevsecopsllmnpmpre-commit-hookpypipython
Source: GitHub repository metadata.
ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.
devsecopsscanningsecurity
Source: GitHub repository metadata.
Power Platform Build Tools automate common build and deployment tasks related to Power Platform. This includes synchronization of solution metadata (a.k.a. solutions) between development environments and source control, generating build artifacts, deploying to downstream environments, provisioning/de-provisioning of environments, and the ability to perform static analysis checks against your solution using the PowerApps checker service.
azure-devopsazure-devops-extensionci-cddataversepowerplattform
Source: GitHub repository metadata.
Forensic AST scanner that detects deliberate obfuscation, hidden logic and payloads smuggled in non-code files
astclicode-analysisdependency-scanningdevsecopsentropy-analysisgithub-actionsmalware-detection
Source: GitHub repository metadata.
JetBrains IDE plugin to scan lockfiles for known CVEs (npm, Cargo, Go, Composer, Ruby, Python). EPSS scores, CISA/EU KEV exploited status and inline findings for IntelliJ, PyCharm, GoLand, WebStorm, RustRover. Powered by mlab.sh
appseccisa-kevcvedependency-scanningdevsecopsepssgolandintellij-idea
Source: GitHub repository metadata.
VS Code extension to scan lockfiles for known CVEs (npm, Cargo, Go, Composer, Ruby, Python). EPSS scores, CISA/EU KEV exploited status, Problems panel diagnostics, CVE hover and IOC lookup. Powered by mlab.sh
appseccargocisa-kevcvedependency-scanningdevsecopsepssgolang
Source: GitHub repository metadata.
Runs Flutter integration tests on real devices in cloud.
aws-devicefarmci-cdflutterflutter-demoflutter-testintegration-testing
Source: GitHub repository metadata.
Local Azure development. One binary. No account needed. 25+ emulated services for testing, CI and local dev.
azureazure-emulatorci-cdclouddeveloper-toolsdevopsgolanglocalstack
Source: GitHub repository metadata.
Project & code-style guideline of Mobillium iOS Team.
asyncawaitcdcici-cdci-cd-pipelinecicdclean-architectureclean-code
Source: GitHub repository metadata.
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.