Protect against malicious open source packages 🤖
☆1,122Oct 27, 2026Updated this week
Alternatives and similar repositories for vet
Users that are interested in vet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.☆558Updated this week
- GitHub Action for policy driven vetting of open source dependencies☆14Jul 3, 2026Updated 3 months ago
- Security layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode, Pi Agent and more.☆181Updated this week
- Reference architecture and proof of concept implementation for supply chain security gateway☆23Apr 1, 2023Updated 3 years ago
- Generate xBOMs enriched with AI, SaaS, Crypto and more using Static Code Analysis☆38Jan 22, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆151Jan 28, 2024Updated 2 years ago
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆892Aug 31, 2026Updated last month
- #supply #chain #attack #detection☆679Oct 23, 2026Updated last week
- A vulnerability scanner for container images and filesystems☆13,140Updated this week
- cli for commit in git.☆11Jul 18, 2023Updated 3 years ago
- Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.☆2,775Updated this week
- Software Supply Chain Security Platform☆425Updated this week
- Sealed execution environment for GitHub Actions.☆73Oct 23, 2026Updated last week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆614Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆639Updated this week
- OSV-SCALIBR: A library for Software Composition Analysis☆651Updated this week
- 🔎 Static code analysis engine to find security issues in code.☆3,254Updated this week
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆232Aug 25, 2026Updated 2 months ago
- Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…☆1,293Updated this week
- poutine, a supply chain vulnerability scanner for build pipelines☆530Oct 21, 2026Updated last week
- Vulnerability scanner written in Go which uses the data provided by https://osv.dev☆11,324Updated this week
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆627Feb 10, 2026Updated 8 months ago
- OpenSSF Scorecard - Security health metrics for Open Source☆5,796Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- transient clipboard server for windows☆12Mar 23, 2026Updated 7 months ago
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆9,792Updated this week
- Code signing and transparency for containers and binaries☆6,397Updated this week
- Enrich SBOMs with data from third party services☆241Sep 21, 2026Updated last month
- Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.☆1,284Updated this week
- GitHub App to set and enforce security policies☆1,461Oct 21, 2026Updated last week
- Open Source Package Analysis☆921Oct 21, 2026Updated last week
- 🧵 CLI tool for directly patching container images!☆1,739Updated this week
- GuardDog is a CLI tool to Identify malicious PyPI and npm packages☆1,238Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A universal SBOM representation in protocol buffers☆338Oct 23, 2026Updated last week
- Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more☆38,833Updated this week
- My personal website (kunalsin9h.com)☆12Mar 23, 2025Updated last year
- Prevent merging of malicious code in pull requests☆259Jan 8, 2026Updated 9 months ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,572Updated this week
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…☆72Nov 27, 2025Updated 11 months ago
- Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on p…☆5,922Apr 16, 2026Updated 6 months ago