GHAST (GitHub Actions Static Analysis Tool) is a tool to analyze the security posture of your GitHub Actions and its surrounding environment for common security vulnerabilities or missing security configuration.
☆19Aug 29, 2023Updated 3 years ago
Alternatives and similar repositories for ghast
Users that are interested in ghast are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- gitsec: GIT Secret Discovery☆18Jun 28, 2018Updated 8 years ago
- A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, sta…☆25Jun 7, 2023Updated 3 years ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 6 months ago
- Scan GitHub repositories for potentially infected MSBuild project files☆17May 27, 2025Updated last year
- Data about all known supply-chain attacks through history☆80Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Go implementation of the PwnKit Linux Local Privilege Escalation exploit (CVE-2021-4034)☆10Feb 23, 2022Updated 4 years ago
- CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.☆11Oct 29, 2018Updated 7 years ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆151Feb 24, 2025Updated last year
- gRPC support for Google Cloud Clients.☆26Apr 24, 2026Updated 5 months ago
- ☆23Mar 4, 2025Updated last year
- ☆14Feb 15, 2022Updated 4 years ago
- Import your WordPress blog to Write.as☆13Feb 20, 2025Updated last year
- Toolset for detecting reflected xss in websites☆16Oct 6, 2018Updated 8 years ago
- Basic w3af scan in Docker. Can be integrated into CI\CD☆10Feb 21, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Small tool to decode ASP.NET __VIEWSTATE variable when doing webpentests☆15Feb 27, 2021Updated 5 years ago
- Jenkins Security Research or Hacking Jenkins ;)☆12Dec 10, 2024Updated last year
- All of our GitHub Actions rolled into one. Or as we like to say: One GitHub Action to rule them all!☆22Jun 7, 2023Updated 3 years ago
- wp content injection mass exploit Perl Script☆12Jul 11, 2017Updated 9 years ago
- Strafer: A tool to detect potential infections in Elasticsearch instances☆27Mar 14, 2021Updated 5 years ago
- Supply Chain Security Research - Attack Trees☆11Jan 9, 2023Updated 3 years ago
- ☆117Jul 3, 2024Updated 2 years ago
- GitHub action to generate a CycloneDX SBOM for Node.js☆23Jul 11, 2025Updated last year
- ANWI - All New Wireless IDS☆28Aug 3, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.☆26Apr 14, 2015Updated 11 years ago
- Free open-source information gathering☆14Mar 20, 2023Updated 3 years ago
- Nice (ish) bindings for the EndpointSecurity framework on macOS for Rust.☆21Dec 14, 2023Updated 2 years ago
- ☆16Feb 8, 2026Updated 8 months ago
- Everything related to YARA☆16Apr 18, 2026Updated 5 months ago
- AI-powered security scanner for Claude Code plugins and skills - LLM analysis, static rules, taint tracking, CI/PR integration, and inte…☆15Mar 1, 2026Updated 7 months ago
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- AWS Modernization DevSecOps Code Samples☆13Nov 30, 2020Updated 5 years ago
- CDF FAQ☆11Aug 16, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- DbgFlashVul☆10Sep 8, 2015Updated 11 years ago
- AI-powered tool designed to help security professionals detect vulnerabilities at machine speed and extract insights from extensive bug b…☆19Aug 27, 2024Updated 2 years ago
- A Flask CLI extension to generate random secret tokens.☆14Nov 19, 2020Updated 5 years ago
- awsbe☆17Jun 1, 2022Updated 4 years ago
- Discord HTTP requests interception POC, including backup codes requests, for educational purposes only.☆24Jul 11, 2024Updated 2 years ago
- A curated list of audit rules which extract from Source Code Auditing tools.☆15Feb 19, 2020Updated 6 years ago
- Demo illustrating Spring Boot deployment on Kubernetes with automatic manifests generation with Dekorate☆11Oct 4, 2026Updated last week