ochronasec / ochrona-cli
A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs
☆51Updated 2 years ago
Alternatives and similar repositories for ochrona-cli:
Users that are interested in ochrona-cli are comparing it to the libraries listed below
- Dependency Combobulator☆93Updated last year
- Hayat is a script for report and analyze Google Cloud Platform resources.☆80Updated 5 years ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Updated 3 years ago
- Security tools report parsers for Faradaysec.com☆53Updated 2 weeks ago
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- Static Token And Credential Scanner☆96Updated 2 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 3 years ago
- 🖇️ STRIDE vs. ASVS equivalence table☆76Updated 8 months ago
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆76Updated 3 years ago
- A project to visualize the software supply chain☆50Updated last year
- A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity program☆15Updated last week
- Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)☆88Updated 2 years ago
- Autoconfigured ELK Stack That Contains All EPSS and NVD CVE Data☆50Updated this week
- Maturity Model Collaborative project☆15Updated 2 years ago
- ☆35Updated 3 years ago
- Lightspin AWS IAM Vulnerability Scanner☆96Updated 4 years ago
- sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.☆81Updated 3 years ago
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆106Updated 2 years ago
- ☆10Updated 2 years ago
- ☆63Updated 2 years ago
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆39Updated 4 months ago
- ☆21Updated 3 years ago
- Cloud Security Dashboard for AWS - based on ScoutSuite☆1Updated last year
- Scan DockerHub images that match a keyword to find secrets.☆57Updated 4 years ago
- ☆110Updated last year
- SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, man…☆78Updated 3 years ago
- CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.☆15Updated 3 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆70Updated 2 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- Scans Slack for API tokens, credentials, passwords, and more using YARA rules☆38Updated 4 years ago