Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
514 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
android-securityapi-testingapkcwedevsecopsdynamic-analysisios-securitymalware-analysis
Source: GitHub repository metadata.
Open-source OpenAPI mock server with cloud hosting and local modes for development, testing, and CI. Generates realistic API responses from specs with latency simulation, error injection, proxy fallback, and request validation. Validated against 2,200+ real-world OpenAPI specs.
api-managementapi-simulationapi-testingci-cdcode-generationcontract-testingdeveloper-toolsgolang
Source: GitHub repository metadata.
EvoGuard — Context before merge. Evidence-driven AI code review & provenance tracking. Context-aware code analysis platform that gates AI-assisted Pull Requests against codebase history, contracts, dependencies, tests & security before merge.
ai-assisted-developmentai-code-reviewai-provenanceb2bcode-provenancecode-qualitycodebase-memorycontext-aware
Source: GitHub repository metadata.
Course lab: CycloneDX SBOM generation and OWASP Dependency-Check compared with another scanner
cyclonedxdependency-scanningjavamavensbomsupply-chain-security
Source: GitHub repository metadata.
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
credentialsdevsecopsdynamic-analysishuskymiseprecommitrustsast
Source: GitHub repository metadata.
A build system and monorepo management tool for the web ecosystem, written in Rust.
build-systembuild-toolbunci-cddenogolangjavascriptmonorepo
Source: GitHub repository metadata.
Vulnerability scanner whose every result is a reproducible, signed claim. Pins the lockfile, the OSV feed, the version comparators, and the exclusions to four digests inside a signed in-toto predicate, so anyone can replay a scan byte for byte, or get a diff naming exactly which input moved.
attestationclidependency-scanningdevsecopsin-totomerkle-treeopenvexosv
Source: GitHub repository metadata.
Dementor — SCA Scanner: the CVEs that actually reach your code. Reachability-aware SCA (deterministic call-graph + optional AI exploitability triage). MTH Dementor toolset.
appseccvedependency-scanningdevsecopsosvreachabilityscasecurity-tools
Source: GitHub repository metadata.
Agentic code reviewer for GitHub PRs and GitLab MRs. Multi-step reasoning with autonomous tool orchestration — catches bugs requiring analysis across files.
agentaici-cdcode-qualitycode-reviewdeveloper-toolslitellmopenhands
Source: GitHub repository metadata.
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
ai-agentsclaude-codecloud-securitycybersecuritydevsecopsethical-hackingincident-responseinfosec
Source: GitHub repository metadata.
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
cisa-kevclaude-aicvecybersecuritydevsecopsepssfastmcpmcp
Source: GitHub repository metadata.
Open-source CI/CD security tool: finds the security checks your pipeline is missing, and the ones that can never fail the build. GitHub Actions, GitLab CI and more.
ci-cdclicode-qualitydevopsdevsecopsgithub-actionsgolangpipeline-security
Source: GitHub repository metadata.
Pipeline is a package to build multi-staged concurrent workflows with a centralized logging output.
cici-cdconcurrentjenkinsjenkins-pipelinepipepipelineworkflow
Source: GitHub repository metadata.
AI-enhanced multi-language SAST — vulnerability detection, AI security reasoning, dependency audit, and PDF assessment reports
aidependency-scanningfastapipythonsastsecuritystatic-analysisvulnerability-detection
Source: GitHub repository metadata.
Example real time quiz application with .NET Core, React, DDD, Event Sourcing, Docker and built-in infrastructure for CI/CD with k8s, jenkins and helm
aspnetcoreci-cdcqrsddddockerdotnetcoreeventsourcinghelm
Source: GitHub repository metadata.
Builders Protect: CLI e GitHub Action para varredura contínua de dependências, relatórios SARIF e rotinas de segurança da Cultura Builder Community.
clicultura-buildercvedependency-scanninggithub-actionnodejssecurity
Source: GitHub repository metadata.
Claude Code plugin and standalone CLI that deep-scans git repositories for secrets, PII, code vulnerabilities, git-history leaks, and dependency CVEs. Secrets are redacted in all output; --ci mode fails the build on HIGH/CRITICAL findings.
anthropicclaude-codeclaude-code-pluginclaude-pluginclicvedependency-scanningdevsecops
Source: GitHub repository metadata.
Run production apps without thinking about infrastructure. On your server or ours. Fully agentic.
agentsaiai-agentsci-cdcoolifycursordeploymentgolang
Source: GitHub repository metadata.
Automated security auditing CLI for AI agent code — quarantine-first workflow for repos, packages, and agent tooling
ai-agentscli-toolcode-scanningdependency-scanningdevtoolsmalware-detectionsecuritysecurity-audit
Source: GitHub repository metadata.
A curated list of awesome references collected since 2018.
agentic-aiaiarchitectureawesome-listawsazurecloud-nativecncf
Source: GitHub repository metadata.
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.