Focused malicious code detection ruleset, with a high protection-to-noise ratio
☆151Feb 24, 2025Updated last year
Alternatives and similar repositories for malicious-code-ruleset
Users that are interested in malicious-code-ruleset are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- My custom semgrep rules☆24Sep 13, 2020Updated 6 years ago
- Scan GitHub Actions Workflow logs for IOCs☆19Oct 22, 2026Updated last week
- Semgrep queries developed by Trail of Bits.☆533May 7, 2026Updated 5 months ago
- my-semgrep-rules☆10Jun 15, 2022Updated 4 years ago
- A collection of permissively licensed Semgrep rules.☆26Jul 5, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- GHAST (GitHub Actions Static Analysis Tool) is a tool to analyze the security posture of your GitHub Actions and its surrounding environm…☆19Aug 29, 2023Updated 3 years ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- the top performing golang cache☆13Sep 23, 2026Updated last month
- ☆246Updated this week
- Supply Chain Security Research - Attack Trees☆11Jan 9, 2023Updated 3 years ago
- LLMs for autonomous generate rules☆12Apr 25, 2025Updated last year
- A tool to audit Hex dependencies, to make sure your ✨ gleam projects really sparkle!☆26Jun 21, 2026Updated 4 months ago
- Dismiss GitHub Code Scanning alerts from SARIF suppression data☆23Oct 20, 2026Updated last week
- Proof of Concepts for unsafe deserialization in Ruby☆17Oct 17, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Go implementation of the PwnKit Linux Local Privilege Escalation exploit (CVE-2021-4034)☆10Feb 23, 2022Updated 4 years ago
- Semgrep rules to identify GWT attack surface☆12Apr 28, 2022Updated 4 years ago
- Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of h…☆93Feb 27, 2025Updated last year
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆26Apr 26, 2026Updated 6 months ago
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆639Updated this week
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆24Oct 4, 2021Updated 5 years ago
- An experimental project using LLM technology to generate security documentation for Open Source Software (OSS) projects☆39Feb 28, 2025Updated last year
- ☆16Jul 14, 2023Updated 3 years ago
- Reachability triage for vulnerability scans. Feeds scanner findings to an LLM agent that reads your source and decides which CVEs are act…☆17Oct 21, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Collects Prometheus metrics for vulnerabilities of each product in DefectDojo☆17May 11, 2026Updated 5 months ago
- poutine, a supply chain vulnerability scanner for build pipelines☆530Oct 21, 2026Updated last week
- AI Guided Hybrid Application Static Testing☆93Updated this week
- ☆17Feb 8, 2026Updated 8 months ago
- Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂☆122Dec 24, 2025Updated 10 months ago
- ☆15Mar 8, 2026Updated 7 months ago
- ☆35Sep 30, 2026Updated 3 weeks ago
- bagel, a CLI that inventories security-relevant metadata on developer workstations☆208Oct 5, 2026Updated 3 weeks ago
- AI Deep SAST - LLM-powered deep static analysis for CI/CD. Combines Semgrep, tree-sitter code indexing and frontier LLMs (e.g. GPT-4o, Cl…☆64Jun 10, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Open source community health analytics at fleet scale — the Go successor to Augur. CHAOSS metrics, contributor analytics, SBOMs, and vuln…☆19Updated this week
- ☆15Sep 22, 2025Updated last year
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- Action to detect if a secret is initially detected in a pull request☆24Updated this week
- Ressources for the regular meeting of distribution security teams☆10Sep 28, 2026Updated last month
- A security tool designed to help review merged code changes to open source maintained repositories via LLM assisted review to safeguard a…☆31Oct 20, 2024Updated 2 years ago
- #supply #chain #attack #detection☆679Updated this week