trivy-action
aquasecurity/trivy-actionRuns Trivy as GitHub action to scan your Docker container image for vulnerabilities
cloud-securitycode-analysiscontainer-security+5
1.5k
aquasecurity/trivy-actionRuns Trivy as GitHub action to scan your Docker container image for vulnerabilities
alphacrack/readme2demoVerified tutorials and demo videos from your README. An AI agent runs it in a hardened Docker sandbox and replays it in a fresh container before…
cdxgen/cdxgenCreates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…
dockersecurityplayground/dspA Microservices-based framework for the study of Network Security and Penetration Test techniques
alegrey91/vex8sSuppress vulnerabilities applying Kubernetes context to scans
wagoodman/diveA tool for exploring each layer in a docker image
ivankovic/stop-botsAutomate stopping bad bots from accessing your server
otsmane-ahmed/ci-supplychain-guardStatic analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…
gensecaihq/react2shell-scannerDetects CVE-2025-55182 RCE in React Server Components by scanning npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Includes auto-fix,…
zupit/horusecHorusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
msaad00/agent-bomOpen-source cloud and AI security platform: scan code, dependencies, containers, cloud and AI agents/MCP into one security graph. Self-host free in…
mathaix/openclawmachinesManage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives
controlplaneio/simulatorKubernetes Security Training Platform - focusing on security mitigation
kubeshop/testkube☸️ The Open Testing Platform for AI-Driven Engineering Teams
finbarr/yoloboxLet your AI go full send. Your home directory stays home.
chainguard-dev/text4shell-policyClusterImagePolicy demo for cve-2022-42889 text4shell
osmankandemir/docf-sec-checkStatic analysis tool that scans Dockerfiles for insecure commands and configuration issues, providing actionable security notifications to harden…
provos/ironcurtainA secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)