Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
appseccode-qualitycompliancedataflowdevsecopsdevsecops-toolsgdprowasp
Source: GitHub repository metadata.
Repository search
Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
514 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
🐰 Bencher - Continuous Benchmarking
benchmarkbenchmarkingcdcici-cdcode-qualitycontinuous-benchmarkingperformance
Source: GitHub repository metadata.
Bulk CVE scanner for npm dependencies using OSV.dev. Paste package.json or package-lock.json to instantly audit vulnerabilities.
cvecvsscybersecuritydependency-scanningdevsecopsnextjsnpmosv
Source: GitHub repository metadata.
over-the-air installation and testing of mobile applications (TestFlight alternative)
androidappstorebertybetaci-cddevtoolsiosmobile
Source: GitHub repository metadata.
Find leaked secrets everywhere.
cicdcredentialsdeveloper-toolsdevopsdevsecopsdynamic-analysisgitgithub
Source: GitHub repository metadata.
Local-first vulnerability intelligence — watches your local repos and tells you which newly-disclosed CVEs actually affect your code, with low false positives.
clicvedependency-scanninggolanglocal-firstosvsbomsca
Source: GitHub repository metadata.
This is what CI/CD should've been.
cdcd4mlcici-cdclojurecontinuous-deliverycontinuous-deploymentcontinuous-integration
Source: GitHub repository metadata.
Scan your codebases for known-compromised package versions. Cross-platform, local-only, three feeds (OSV / OpenSSF / Aikido), interactive TUI, opt-in autostart.
clidependency-scanningmalwarenpmosvpypipythonsecurity
Source: GitHub repository metadata.
This repository contains a curated list of resources I suggest on LinkedIn and Twitter.📝🌝
application-securitycertificationcodereviewcybersecuritydevsecopsinfosecpentesting
Source: GitHub repository metadata.
GitHub Actions automation examples with Docker's official actions
buildkitci-cddevopsdockerdocker-builddockercongithub-actions
Source: GitHub repository metadata.
Reusable GitHub Actions workflow examples for cloud native DevOps
actionsci-cddevopsdevsecopsdockergithub-actionsworkflowworkflow-reusable
Source: GitHub repository metadata.
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
aws-securityazure-securitycloud-securitydevsecopsgcp-securitygoatterraform
Source: GitHub repository metadata.
Code samples for the book and blog post series "Fundamentals of DevOps and Software Delivery" by Yevgeniy Brikman
awsci-cddevopsdockerinfrastructure-as-codekubernetesmonitoringnetworking
Source: GitHub repository metadata.
Local-first Git diff triage. Turn patches into actionable review checklists in your browser, CLI or GitHub Actions. Zero dependencies, no AI keys, no uploads. By brunnodev.
ci-cdclicode-qualitycode-reviewdeveloper-productivitydeveloper-toolsgit-diffgithub-actions
Source: GitHub repository metadata.
Graph-native supply-chain blast-radius scanner: which compromised npm/PyPI packages can actually reach your project, and through which path. Powered by HydraDB.
dependency-graphdependency-scanningdevtoolsgithub-appgraph-databasehydradbnpmosv
Source: GitHub repository metadata.
🛡️ Self-hosted vulnerability scanner — scan websites, IPs & code against 100k+ CVEs (NVD + CISA KEV), live scan logs, SARIF reports, CLI & scheduled scans. Two dependencies, zero cloud.
appseccisa-kevcvecybersecuritydependency-scanningdevsecopsepssnodejs
Source: GitHub repository metadata.
Unified SAST + DAST + SCA security scanner. Python 3.11+, async, CLI-first. 668 tests.
appsecasyncioclicvedastdependency-scanningdevsecopsethical-hacking
Source: GitHub repository metadata.
:baby_chick: A build monitor with attitude
cctraycdcici-cdcirclecicontinuous-deliverycontinuous-deploymentcontinuous-integration
Source: GitHub repository metadata.
Defensive security audit toolkit for authorized web and local projects.
auditdefensive-securitydependency-scanningowaspsarifsecrets-scanningsecuritystatic-analysis
Source: GitHub repository metadata.
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
antibotcybersecuritydevopsdevsecopsdnsbldockerhardeninghosting
Source: GitHub repository metadata.
What this index tells you
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.