globocom / huskyCI
Performing security tests inside your CI
☆576Updated 5 months ago
Related projects ⓘ
Alternatives and complementary repositories for huskyCI
- Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.☆1,147Updated this week
- Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilit…☆515Updated 2 years ago
- Security Champions Playbook v 2.1☆347Updated last year
- A Continuous Threat Modeling methodology☆311Updated 2 years ago
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆846Updated 3 months ago
- Agile Threat Modeling Toolkit☆615Updated this week
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,083Updated this week
- threatspec - continuous threat modeling, through code☆332Updated 3 years ago
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆726Updated 3 months ago
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆147Updated 4 years ago
- ☆492Updated last month
- EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdat…☆709Updated 2 months ago
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆805Updated last year
- A service that analyzes docker images and scans for vulnerabilities☆1,585Updated last year
- A Blazing fast Security Auditing tool for Kubernetes☆990Updated 7 months ago
- Identify hardcoded secrets in static structured text☆476Updated last year
- Documenting your Threat Models with HCL☆400Updated 2 months ago
- Security Remediation Guides☆708Updated 3 weeks ago
- A tool to scan Kubernetes cluster for risky permissions☆1,323Updated this week
- ☆399Updated last year
- A GitHub Action for running the ZAP Baseline scan☆311Updated last month
- OpenClarity is an open source tool built to enhance security and observability of cloud native applications and infrastructure☆1,346Updated this week
- Getting a handle on container security☆632Updated 11 months ago
- A curated list for Awesome Kubernetes Security resources☆1,915Updated last year
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆509Updated this week
- Open Cloud Security Posture Management Engine☆333Updated 2 years ago
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆769Updated this week
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆375Updated this week