mllamazares / vulncov
π§ͺ Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.
β39Updated 4 months ago
Alternatives and similar repositories for vulncov:
Users that are interested in vulncov are comparing it to the libraries listed below
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.β41Updated last year
- Manager of third-party sources of Semgrep rules πβ81Updated 9 months ago
- Semgrep-based Policy Controller for Kubernetesβ47Updated last month
- EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.β35Updated 4 months ago
- truffleproc β hunt secrets in process memory (TruffleHog & gdb mashup)β117Updated last year
- β72Updated 3 months ago
- boostsecurityio/lotpβ123Updated 3 weeks ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagramsβ104Updated 3 months ago
- β110Updated last year
- This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interestingβ¦β46Updated 8 months ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratioβ116Updated 2 months ago
- Create notes during a security code review in VSCode π Import your favorite SAST tool findings π οΈ and collaborate with others π€β133Updated last month
- Security tool against dependency typosquatting attacksβ39Updated last week
- Atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.β64Updated last week
- Protect against subdomain takeoverβ92Updated 11 months ago
- Unauthenticated enumeration of AWS IAM Roles.β24Updated 3 months ago
- A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projectsβ76Updated 2 weeks ago
- HashiCorp-relevant rules for the Semgrep code analysis toolβ41Updated last year
- β63Updated 3 months ago
- A tool for preventing the installation of malicious PyPI and npm packagesβ140Updated this week
- FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)β49Updated 2 weeks ago
- Static code analyser for backdoors and malicious code in git repos using OpenAI compatible LLM APIsβ73Updated last year
- Nuclei plugins to audit Chrome extensionsβ64Updated 9 months ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflowsβ95Updated 3 weeks ago
- LLM Testing Findings Templatesβ71Updated last year
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRFβ58Updated last year
- Clean accounts over permissions in GCP infra at scaleβ71Updated last year
- β35Updated 9 months ago
- ποΈ STRIDE vs. ASVS equivalence tableβ76Updated 8 months ago
- A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity programβ15Updated this week