GHAST (GitHub Actions Static Analysis Tool) is a tool to analyze the security posture of your GitHub Actions and its surrounding environment for common security vulnerabilities or missing security configuration.
☆19Aug 29, 2023Updated 3 years ago
Alternatives and similar repositories for ghast
Users that are interested in ghast are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The official GitHub Copilot Advanced Security plugin☆19May 7, 2026Updated 5 months ago
- SecureStack Application Bill of Materials (ABOM/SBOM)☆13Aug 26, 2022Updated 4 years ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 7 months ago
- ☆12Mar 9, 2026Updated 7 months ago
- AgentCouncil - Using Collaborative or Adverserial multi agent (from different model providers) to get more trustworthy result with GitHub…☆17Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆22Apr 10, 2025Updated last year
- Data about all known supply-chain attacks through history☆80Oct 24, 2026Updated last week
- Go implementation of the PwnKit Linux Local Privilege Escalation exploit (CVE-2021-4034)☆10Feb 23, 2022Updated 4 years ago
- VS Code extension that follows file changes in real-time, automatically opening editors and scrolling to edits. Perfect for watching CLI-…☆22Sep 5, 2026Updated last month
- ☆14Dec 12, 2022Updated 3 years ago
- ☆14Feb 15, 2022Updated 4 years ago
- Web Application Firewall Test Script☆14Feb 28, 2023Updated 3 years ago
- ☆14Apr 9, 2019Updated 7 years ago
- A powerful containerized tool that automatically downloads, extracts, and scans packages from PyPI and npm for embedded secrets, API keys…☆21Jul 25, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- All of our GitHub Actions rolled into one. Or as we like to say: One GitHub Action to rule them all!☆22Jun 7, 2023Updated 3 years ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆151Feb 24, 2025Updated last year
- Dotnet Source and Assembly Inspector (Dosai) is a tool to list details about the namespaces and methods from sources and assemblies.☆14Updated this week
- A simple little Python script that uses Impacket to check if SMBv1 is enabled on a remote host☆15Mar 9, 2017Updated 9 years ago
- My Wardley Mapping Stuff (see: https://medium.com/wardleymaps)☆13May 3, 2021Updated 5 years ago
- Menubar for smart GitHub pull request tracking & notifications☆34May 25, 2026Updated 5 months ago
- Websocket based egress tester☆20Nov 23, 2016Updated 9 years ago
- Security-first development skills for Claude Code, powered by the F.O.R.G.E. framework. Built by operators, not consultants.☆11Oct 12, 2026Updated 3 weeks ago
- Strafer: A tool to detect potential infections in Elasticsearch instances☆27Mar 14, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Eddie Vetter - triage macOS applications for security research☆16May 24, 2021Updated 5 years ago
- Supply Chain Security Research - Attack Trees☆11Jan 9, 2023Updated 3 years ago
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆17Apr 22, 2026Updated 6 months ago
- Write simple security regression tests for your network infrastructure.☆19Jul 4, 2012Updated 14 years ago
- ☆117Jul 3, 2024Updated 2 years ago
- GitHub action to generate a CycloneDX SBOM for Node.js☆23Jul 11, 2025Updated last year
- Salt Project replacement written in Go☆11Updated this week
- Small tool to decode ASP.NET __VIEWSTATE variable when doing webpentests☆16Feb 27, 2021Updated 5 years ago
- Wordpress Plugin "WP Checkout" Mass exploit☆16Jun 18, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Find open databases - Powered by Binaryedge.io☆14Jan 4, 2020Updated 6 years ago
- A malware scanner with Yara and ClamAV binding☆12May 23, 2026Updated 5 months ago
- A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.☆26Apr 14, 2015Updated 11 years ago
- A simple web app to get the latest EPSS data for a CVE ID☆14Dec 14, 2025Updated 10 months ago
- Documentation on how to create reproducible and secure fleet of machines running Arch Linux☆13Mar 20, 2021Updated 5 years ago
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- Convert PromptIntel & MoltThreats feeds into Nova Framework detection rules☆15Sep 16, 2026Updated last month