Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
514 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure code reviews. Features common vulnerabilities found in real-world applications, making it an ideal platform for security professionals, developers, and enthusiasts to learn pentesting and secure coding practices.
ai-securityapisecurityapplication-securitydevsecopspenetration-testingsecure-coding
Source: GitHub repository metadata.
Pipeleek scans CI/CD logs and artifacts to detect leaked secrets and pivot from them
attackcicdgithubgitlabpentestpipeleekrenovatesecret-scanning
Source: GitHub repository metadata.
Concourse is a container-based automation system written in Go. It's mostly used for CI/CD.
cici-cdconcoursecontainerdcontainerscontinuous-deliverycontinuous-integrationelm
Source: GitHub repository metadata.
ContainerSSH: Launch containers on demand
containersdevsecopsdockerkubernetessecuritysecurity-toolsssh
Source: GitHub repository metadata.
Kubernetes Security Training Platform - focusing on security mitigation
cloud-nativectfdevsecopsdockerkubernetesopen-sourcepenetration-testingred-team
Source: GitHub repository metadata.
Stop API keys and passwords leaking into AI tools. Offline secret detection and redaction for VSCode, Cursor, Windsurf, and Claude Code.
ai-securityappsecclaude-codedeveloper-toolsdevsecopssecret-detectionsecret-scanningsecrets
Source: GitHub repository metadata.
A visual builder for AI workflows with security designed in: SSRF-guarded requests, rate limiting and encrypted BYOK keys. Includes an OSV.dev dependency scanner whose AI report can't change its findings. MIT licensed.
ai-securityai-workflowsbyokdependency-scannerdependency-scanningllm-securitynextjsvercel-ai-sdk
Source: GitHub repository metadata.
gitghost — find secrets in a GitHub account's public repos, including ones 'deleted' but still recoverable from git history. Exposure score + HTML dossier. Detection-only, zero dependencies.
api-keysbug-bountycli-toolcredential-scannerdevsecopsgitgit-historygithub-security
Source: GitHub repository metadata.
Automation engine to build, test and ship any codebase. Runs locally, in CI, or directly in the cloud
agentscachingci-cdcontainerscontinuous-deploymentcontinuous-integrationdevopsdocker
Source: GitHub repository metadata.
⚠️ Stop saying "you forgot to …" in code review
ci-cdhacktoberfestnotificationspull-requestsreporting
Source: GitHub repository metadata.
Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.
ai-securityclaude-codecodexcoding-agentscursordata-redactiondlpllm
Source: GitHub repository metadata.
Canary deployments for your Serverless application
awsaws-codedeployaws-lambdacanary-deploymentsci-cdcontinuous-deliverycontinuous-deploymentcontinuous-integration
Source: GitHub repository metadata.
Govern: one Decionis verdict before a workflow step runs — a deploy, a migration, an infrastructure change, an agent's action — with a signed Decision Dossier of it. GitHub Actions, GitLab CI, Jenkins; shadow or enforce; no local policy engine.
agentic-aiai-agentsai-governanceai-safetyci-cdcompliancedecionisdecision-dossier
Source: GitHub repository metadata.
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
containersdevsecopsdockerhacktoberfestinfosectoolsk8skubernetespassword
Source: GitHub repository metadata.
Open Source Cloud Native Application Protection Platform (CNAPP)
cloud-nativecloudsecuritycnappcompliancecontainerscspmcwppdevops
Source: GitHub repository metadata.
🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍
ci-cddevsecopsdevsecops-best-practicesdevsecops-pipelinehacktoberfestiocmalwarethreat-hunting
Source: GitHub repository metadata.
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
analyticsappsecautomationdevsecopsdjangohacktoberfestkubernetesowasp
Source: GitHub repository metadata.
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
appsecbill-of-materialsbomcomponent-analysiscyclonedxdevsecopshacktoberfestnvd
Source: GitHub repository metadata.
Self-contained security scanner CLI — secrets, deps, supply chain, SAST, obfuscation. One binary, zero dependencies.
clicode-securitydependency-scanningdevsecopsowasprustsastscanner
Source: GitHub repository metadata.
Git-aware secret & .env leak guard for TypeScript/Node — sub-second pre-commit scanning with the lowest false-positive rate.
clidevsecopsdotenvgit-hookspre-commitsecret-scanningsecretssecurity
Source: GitHub repository metadata.
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.