OWASP / www-project-non-human-identities-top-10
OWASP Non-Human Identities Top 10
☆31Updated last month
Alternatives and similar repositories for www-project-non-human-identities-top-10
Users that are interested in www-project-non-human-identities-top-10 are comparing it to the libraries listed below
Sorting:
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆54Updated 3 months ago
- ☆73Updated last month
- ☆65Updated 5 months ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆118Updated 2 months ago
- ☆123Updated this week
- Security tool against dependency typosquatting attacks☆39Updated this week
- An OpenAI API Compatible Honeypot Gateway☆16Updated 2 months ago
- Pentester-focused Docker registry tool to enumerate and pull images☆21Updated 3 weeks ago
- RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…☆149Updated 5 months ago
- YouShallNotPass brings an added level of execution security to mission-critical CI/CD Systems.☆36Updated last year
- Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK…☆165Updated 7 months ago
- Web Server Vulnerability Scanning Tool☆35Updated 2 months ago
- ☆182Updated last month
- Semgrep-based Policy Controller for Kubernetes☆47Updated last month
- ☆23Updated last month
- AcSecurity is a Python module designed to scan applications for common security vulnerabilities. It checks for hardcoded secrets, depende…☆15Updated 6 months ago
- Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments☆140Updated 4 months ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆110Updated this week
- HashiCorp-relevant rules for the Semgrep code analysis tool☆41Updated last year
- Tool for obfuscating and deobfuscating data.☆70Updated last year
- A MCP server for using Semgrep to scan code for security vulnerabilities.☆148Updated 2 weeks ago
- ☆35Updated 9 months ago
- ☆30Updated last month
- ☆48Updated 6 months ago
- Cloud Commotion intends to cause chaos to simulate security incidents☆143Updated 11 months ago
- EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.☆35Updated 4 months ago
- A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalo…☆376Updated 7 months ago
- An open-source collection of API key rotation tutorials.☆71Updated last month
- Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams☆50Updated this week
- A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projects☆76Updated last week