DataDog / guarddog
GuardDog is a CLI tool to Identify malicious PyPI and npm packages
☆733Updated last week
Alternatives and similar repositories for guarddog:
Users that are interested in guarddog are comparing it to the libraries listed below
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆307Updated this week
- An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.☆201Updated this week
- Open Source Package Analysis☆833Updated 3 weeks ago
- boostsecurityio/poutine☆267Updated last week
- Awesome secure by default libraries to help you eliminate bug classes!☆690Updated 2 weeks ago
- Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streaml…☆268Updated this week
- Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.☆517Updated 2 months ago
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆801Updated last month
- A tool for preventing the installation of malicious PyPI and npm packages☆141Updated this week
- A repo to conduct vulnerability enrichment.☆625Updated this week
- An open project to list all publicly known cloud vulnerabilities and CSP security issues☆342Updated last month
- CI/CD Security Analyzer☆658Updated 2 months ago
- #supply #chain #attack #detection☆515Updated this week
- A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…☆357Updated 4 months ago
- ☆367Updated last year
- Advisory database for Python packages published on pypi.org☆286Updated this week
- cloudgrep is grep for cloud storage☆327Updated 2 months ago
- Gram is Klarna's own threat model diagramming tool☆320Updated last week
- Documenting your Threat Models with HCL☆426Updated this week
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆329Updated last week
- A Pythonic framework for threat modeling☆993Updated 2 months ago
- Tool for building Kubernetes attack paths☆857Updated this week
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆564Updated last month
- Production-ready detection & response queries for osquery☆566Updated last week
- GitHub Actions Pipeline Enumeration and Attack Tool☆634Updated 3 weeks ago
- A curated list of resources about detecting threats and defending Kubernetes systems.☆377Updated last year
- GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment☆464Updated last month
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆746Updated 4 months ago
- Global Security Database☆318Updated last year
- Feed parsing for language package manager updates☆79Updated 5 months ago