Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
514 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
cvecvssdevsecopshacktoberfestpythonsbomsbom-toolsecurity
Source: GitHub repository metadata.
Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
developer-toolsdevopsdevops-toolsdevsecopsdynamic-analysismalwaremalware-analysisnpm
Source: GitHub repository metadata.
OSS SCA scanner — SBOM + CVE + EUVD + KEV enrichment. Run ottersight scan . locally or in CI.
clicvedependency-scanningeuvdsbomscasecuritytypescript
Source: GitHub repository metadata.
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
compliancecontainerscvecyclonedxdependency-analysisdependency-auditdevsecopsreachability-analysis
Source: GitHub repository metadata.
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
api-securityattack-surfacescrystaldevsecopsendpointshacktoberfestowaspowasp-noir
Source: GitHub repository metadata.
The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
devsecopsowaspsecurityshift-left
Source: GitHub repository metadata.
Application Security Automation
ci-cddevsecopsowasptool
Source: GitHub repository metadata.
Vulnerable app with examples showing how to not use secrets
agentsaiappsecawsazurectfdevsecopsdocker
Source: GitHub repository metadata.
AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup.
agent-securityai-securitycode-analysiscve-detectiondevsecopsllm-securitymcpnextjs
Source: GitHub repository metadata.
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
cvedependency-scanningnodejsnpmpatchstackscasecuritytypescript
Source: GitHub repository metadata.
📱A sample repository to demonstrate the Automate publishing🚀 app to the Google Play Store with GitHub Actions⚡+ Fastlane🏃.
androidandroid-applicationautomationcici-cddeveloper-consolefastlanefastlane-android
Source: GitHub repository metadata.
A comprehensive collection of AI development patterns for building software with AI assistance, organized by implementation maturity and development lifecycle phases. Includes Foundation, Development, and Operations patterns with practical examples and anti-patterns.
ai-assisted-codingai-developmentai-toolsartificial-intelligenceautomationbest-practicesci-cdcoding-standards
Source: GitHub repository metadata.
Prompt-injection, jailbreak and secret-leak defense for DeepSeek Harness: Aho-Corasick detection with allow/ask/block interception and sanitized audit events. Maintenance status: FROZEN since 2026-10-05.
ai-agentai-agentscordisdeepseekdeepseek-harnessdeveloper-toolsdshdsh-plugin
Source: GitHub repository metadata.
A GitHub action to create a pull request for changes to your repository in the actions workspace
actions-workspaceautomationci-cdcreate-pull-requestgithub-actionpull-requestworkflow
Source: GitHub repository metadata.
Security scanner for public GitHub repositories — detects secrets, dangerous code patterns, dependency risks, and security misconfigurations with deterministic scoring.
application-securitycode-securitycybersecuritydependency-scanningdevsecopsgithub-actionsgithub-securitysast
Source: GitHub repository metadata.
GitHub Action for scanning public repositories for secrets, dangerous code patterns, dependency risks, and security configuration issues.
code-securitydependency-scanningdevsecopsgithub-actionsgithub-securitysastsecret-scanningsecurity
Source: GitHub repository metadata.
50 QA and test-automation skills for Claude Code, Codex, Cursor, and any Agent Skills Standard runtime.
agent-skillsagentskillsai-agentsai-testingci-cdclaude-codecodexcursor
Source: GitHub repository metadata.
A fast, automated security auditing dashboard that aggregates daily scans from all your projects. PhantomScanner collects results from Semgrep, Bandit, Trivy, and Gitleaks, normalizes them into a unified schema, stores them in a SQLite/Postgres backend, and visualizes them through a simple, responsive dashboard. Designed to scan many repos for free
appsecautomationbanditcicddashboarddependency-scanningdevsecopsdocker
Source: GitHub repository metadata.
Fail your CI when phi flags a dependency as REVIEW or BLOCKED — GitHub Action wrapper for phi audit
cidependency-scanninggithub-actionsmalware-detectionnpmsastscasecurity
Source: GitHub repository metadata.
PickBits Dependency Audit — report-only local dependency vulnerability audit built on OSV. MIT, no telemetry, no source-code upload.
claude-codecybersecuritydependency-scanningosvvulnerability-management
Source: GitHub repository metadata.
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.