ForAllSecure / mapi-action
🤖 Run a Mayhem for API scan in GitHub Actions
☆23Updated this week
Related projects ⓘ
Alternatives and complementary repositories for mapi-action
- ☆13Updated last month
- Mayhem example templates for programming languages and fuzzers that you love!☆27Updated 10 months ago
- Precaution CLI - command line static application security testing tool☆23Updated this week
- A place to systematically store software bill of materials (SBOM) documents.☆44Updated last year
- Python classes for the SARIF object model☆41Updated 7 months ago
- A Python library and command line interface for CVE Services.☆58Updated 3 weeks ago
- This project is deprecated. Use https://github.com/returntocorp/semgrep instead☆73Updated 7 months ago
- SARIF Microsoft Visual Studio Code extension☆111Updated last month
- ☆23Updated 3 months ago
- A community collection of security reviews of open source software components.☆92Updated 8 months ago
- An auto-scoring capture-the-flag game focusing on TOCTOU vulnerabilities☆18Updated 4 years ago
- OWASP Foundation Web Respository☆27Updated 3 months ago
- github action to run the bandit security linter☆15Updated 2 months ago
- Golang tool to pull and summarize NPM license info☆12Updated last year
- Securing open-source package ecosystems by originating, validating, and augmenting build attestations.☆32Updated this week
- Sample CICD Pipelines for OneFuzz☆27Updated last year
- Semgrep extension for Visual Studio Code☆54Updated this week
- Compare vulnerability scanners results (to make them better!)☆15Updated last week
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆71Updated 3 weeks ago
- Simple fuzzer for OpenAPI 3 specification based APIs☆21Updated last year
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆126Updated last year
- The model for the information captured in SPDX version 3 standard.☆71Updated this week
- ☆29Updated 3 years ago
- ☆10Updated 10 months ago
- Securing Alice's, Bob's and Carl's software supply chain using in-toto☆89Updated last month
- Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.☆11Updated 3 years ago
- Security scanning & static analysis tool☆93Updated last month
- The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute …☆53Updated 2 years ago
- Source code for the Binaries of OWASP WrongSecrets☆10Updated 2 weeks ago
- Low-effort reachability analysis for third-party code vulnerabilities.☆20Updated last year