Awesome secure by default libraries to help you eliminate bug classes!

Just playing about with openai API and stocks

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

Make Abe yell at stuff!

A tiny JVM written in Rust. Learning project

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

GUAC aggregates software security metadata into a high fidelity graph database.

A tool to check the security settings of Github Organizations.

Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.

Little scripts to Maya Artists

Scriptable USB HID device for STM32F103 blue pill (inspired by USB Rubber Ducky) ⛺

Your filesystem as a dungeon!

Open source ARM Cortex-M microcontroller library

A reading list for software supply-chain security.

Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left!

This is a dockerized application that is vulnerable to the Spring4Shell vulnerability (CVE-2022-22965).

An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations.qll` library

Temporary Credential Service

Tfsec is now part of Trivy

Python implementation of OWASP CycloneDX

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Open Source Package Analysis

A system to flag anomalous source code expressions by learning typical expressions from training data

🔥Open source RASP solution