GHAST (GitHub Actions Static Analysis Tool) is a tool to analyze the security posture of your GitHub Actions and its surrounding environment for common security vulnerabilities or missing security configuration.
☆20Aug 29, 2023Updated 3 years ago
Alternatives and similar repositories for ghast
Users that are interested in ghast are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15May 30, 2026Updated 3 months ago
- ☆22Apr 10, 2025Updated last year
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆151Feb 24, 2025Updated last year
- ☆23Mar 4, 2025Updated last year
- A powerful containerized tool that automatically downloads, extracts, and scans packages from PyPI and npm for embedded secrets, API keys…☆20Jul 25, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆14Feb 15, 2022Updated 4 years ago
- Import your WordPress blog to Write.as☆13Feb 20, 2025Updated last year
- Basic w3af scan in Docker. Can be integrated into CI\CD☆10Feb 21, 2020Updated 6 years ago
- Small tool to decode ASP.NET __VIEWSTATE variable when doing webpentests☆15Feb 27, 2021Updated 5 years ago
- Jenkins Security Research or Hacking Jenkins ;)☆12Dec 10, 2024Updated last year
- ☆14Apr 9, 2019Updated 7 years ago
- A simple web app to get the latest EPSS data for a CVE ID☆14Dec 14, 2025Updated 9 months ago
- Java RAT called STRRat - Source code & Deobfuscator☆12Aug 12, 2022Updated 4 years ago
- Eddie Vetter - triage macOS applications for security research☆16May 24, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Supply Chain Security Research - Attack Trees☆11Jan 9, 2023Updated 3 years ago
- Find open databases - Powered by Binaryedge.io☆14Jan 4, 2020Updated 6 years ago
- Websocket based egress tester☆20Nov 23, 2016Updated 9 years ago
- Simple shell script for automated domain recognition with some tools☆20Mar 9, 2019Updated 7 years ago
- ANWI - All New Wireless IDS☆28Aug 3, 2018Updated 8 years ago
- A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.☆26Apr 14, 2015Updated 11 years ago
- Terradoc is a lean helper tool that creates human readable documentation from HCL syntax.☆13Nov 21, 2024Updated last year
- Free open-source information gathering☆14Mar 20, 2023Updated 3 years ago
- A malware scanner with Yara and ClamAV binding☆12May 23, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Everything related to YARA☆16Apr 18, 2026Updated 5 months ago
- AI-powered security scanner for Claude Code plugins and skills - LLM analysis, static rules, taint tracking, CI/PR integration, and inte…☆15Mar 1, 2026Updated 6 months ago
- ⚠️ ARCHIVED**: This repository is no longer actively maintained. All Sigma rules are now managed and available in SIEM Rules☆14Mar 19, 2026Updated 6 months ago
- A security tool designed to help review merged code changes to open source maintained repositories via LLM assisted review to safeguard a…☆31Oct 20, 2024Updated last year
- AI-powered tool designed to help security professionals detect vulnerabilities at machine speed and extract insights from extensive bug b…☆19Aug 27, 2024Updated 2 years ago
- A Flask CLI extension to generate random secret tokens.☆14Nov 19, 2020Updated 5 years ago
- awsbe☆17Jun 1, 2022Updated 4 years ago
- Demo illustrating Spring Boot deployment on Kubernetes with automatic manifests generation with Dekorate☆11Aug 25, 2026Updated 3 weeks ago
- A malicious KeePass plugin to exfiltrate the master key.☆16Oct 25, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- OWASP Foundation Web Respository☆60Aug 1, 2026Updated last month
- In this workshop we will build a pipeline for a sample WordPress site in a stack. We will explore how to validate, lint and test template…☆20Apr 28, 2022Updated 4 years ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- 先知社区爬虫☆14Dec 7, 2020Updated 5 years ago
- ☆17Jun 5, 2026Updated 3 months ago
- Reverse shell using socket programming in python☆15Dec 8, 2022Updated 3 years ago
- Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.☆22May 4, 2023Updated 3 years ago