ochronasec / ochrona-cli
A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs
☆51Updated 2 years ago
Alternatives and similar repositories for ochrona-cli:
Users that are interested in ochrona-cli are comparing it to the libraries listed below
- Security tools report parsers for Faradaysec.com☆53Updated last week
- Monitoring GitHub for sensitive data shared publicly☆66Updated 3 years ago
- Dependency Combobulator☆93Updated last year
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆61Updated 9 months ago
- ☆10Updated 2 years ago
- Static Token And Credential Scanner☆96Updated last year
- Hayat is a script for report and analyze Google Cloud Platform resources.☆80Updated 5 years ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆105Updated 2 years ago
- ☆35Updated 3 years ago
- Maturity Model Collaborative project☆14Updated 2 years ago
- Compares the TLS configuration of a web server to the Mozilla TLS Profiles☆25Updated last year
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆39Updated 3 months ago
- 🖇️ STRIDE vs. ASVS equivalence table☆76Updated 7 months ago
- Scan DockerHub images that match a keyword to find secrets.☆55Updated 4 years ago
- ☆41Updated 3 years ago
- Tool to guess CPE name based on common software name☆92Updated 4 months ago
- DefectDojo Community Content☆17Updated 5 months ago
- GHAST (GitHub Actions Static Analysis Tool) is a tool to analyze the security posture of your GitHub Actions and its surrounding environm…☆17Updated last year
- A community collection of security reviews of open source software components.☆93Updated last year
- InfoSec OpenAI Examples☆19Updated last year
- Global Security Database Tools☆42Updated last year
- A curated list of security tools for Hackers & Builders!☆99Updated 8 months ago
- A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain☆91Updated last month
- ☆63Updated 2 years ago
- Discover vulnerabilities and container image misconfiguration in production environments.☆55Updated last month
- Salesforce Policy Deviation Checker☆30Updated 4 years ago
- Docs: Vulnerability management aggregation of AppSec & OpSec (Tools Listing)☆30Updated last year
- CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.☆15Updated 3 years ago
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆63Updated this week