Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
514 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
application-securityappsecdevsecopsinfosecinterview-questionssdlcsecurity-engineer-interviewsecurity-engineering
Source: GitHub repository metadata.
Find credentials your coding agent already sent. Scans local Claude Code and Codex transcripts against the gitleaks rule set. No network, no telemetry, zero dependencies.
ai-agentsclaude-codeclicodexcredentialsdevsecopsgitleakssecret-scanning
Source: GitHub repository metadata.
Local Chrome extension for finding patterns associated with credentials and sensitive values exposed in web pages.
chrome-extensionjavascriptsecret-scanningsecurity
Source: GitHub repository metadata.
AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.
anthropicbrowser-extensionchatgptclaudecodexdata-protectionllmllm-privacy
Source: GitHub repository metadata.
Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked or anywhere in the history. Your real values, not patterns.
api-keysclicredentialsdevsecopsdotenvenvenvironment-variablesgit
Source: GitHub repository metadata.
Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.
appsecdependency-scandevsecopslicense-scansastscannersworkflow
Source: GitHub repository metadata.
A service that bridges traditional pipelines and GitOps, improving deployment visibility. Includes a built-in GitOps repo updater.
argocdargocd-toolsautomationci-cdcontinuous-deliverydeployment-automationdeployment-statusdeployment-tracking
Source: GitHub repository metadata.
Proxy security, All-in-one vuln scanner: images, OS packages, dependencies & SAST, with EPSS/KEV/CVSS risk scoring / Toxic repos in lib
dependency-scanningdevsecopsosaproxy-securitysecuritysecurity-toolssupply-chain-securitytrivy
Source: GitHub repository metadata.
Dependency vulnerability and malicious-package guard with memory, for AI coding agents. Checks lockfiles against OSV at session start, vets packages before install, and reports only what changed since the last check. Works with Claude Code, Codex, Cursor, Gemini CLI, Copilot and more.
agent-skillsai-agentsclaude-codeclicodexcomposercursorcve
Source: GitHub repository metadata.
Pre-AI repo sanitization. Redact secrets before your code meets the LLM.
ai-securityclidevsecopspii-detectionredactionsecret-scanning
Source: GitHub repository metadata.
Agent skill for static, read-only security review of your own application source: recon, multi-perspective review, verification, and dashboard/PDF reports.
agent-skillsappsecclaude-codecode-reviewdependency-scanningsastsecuritysecurity-audit
Source: GitHub repository metadata.
Cross-language fixture repository for testing dependency discovery and vulnerable-package surfacing across manifests, lockfiles, and vendored package metadata.
dependency-analysisdependency-scanningsecuritysoftware-composition-analysissupply-chain-attacksupply-chain-securitytest-fixturesvulnerability-detection
Source: GitHub repository metadata.
Local-first blue-team security platform. Scans code, secrets, dependencies, and databases in isolated local sandboxes, verifies fixes, and opens PRs to GitHub.
appsecblue-teamcybersecuritydatabase-securitydocker-sandboxiac-securitylocal-firstpull-requests
Source: GitHub repository metadata.
đź“ś A Cheat-Sheet Collection from the WWW
aiansiblebashcheat-sheetcheat-sheetscheatsheetci-cddevops-tools
Source: GitHub repository metadata.
Free dependency vulnerability scanner — scans full transitive tree for CVEs. Supports npm, PyPI, Maven. No signup.
cvecve-scanningdependenciesdependency-checkerdependency-graphdependency-scannerdependency-scanningdevsecops
Source: GitHub repository metadata.
Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality. 14 SQL dialects. Offline. CI/CD ready.
bigqueryci-cdclickhousecode-qualitycompliancedatabasedeveloper-toolsdevops
Source: GitHub repository metadata.
Flutter clean architecture
architectureblocci-cdclean-architecturecubitdartflutterflutter-architecture
Source: GitHub repository metadata.
An AI-ready security scanner for public GitHub repositories that detects exposed secrets and vulnerable dependencies, calculates a security score, and exports actionable PDF and AI-friendly reports.
ai-readycvsscybersecuritydependency-scanninggithubllm-reportsnextjsnodejs
Source: GitHub repository metadata.
Zero-config pre-commit secret scanner for Git repositories.
clideveloper-toolsdevsecopsgitgit-hooksgogolangpre-commit
Source: GitHub repository metadata.
Ultimate DevSecOps library
automationawesomeawesome-listawsazureci-cdcloudcontainers
Source: GitHub repository metadata.
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.