twilio-labs / deadshotLinks
Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository
☆191Updated 11 months ago
Alternatives and similar repositories for deadshot
Users that are interested in deadshot are comparing it to the libraries listed below
Sorting:
- A crowdsourced Google Cloud IAM permissions reference.☆24Updated 3 months ago
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆170Updated 8 months ago
- Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).☆143Updated 5 months ago
- Trivy's misconfiguration scanning engine☆216Updated 8 months ago
- Threat matrix for CI/CD Pipeline☆760Updated last year
- Open source compliance tool for development platforms.☆287Updated last year
- Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrust…☆112Updated last month
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆334Updated 5 months ago
- Add comments to pull requests where tfsec checks have failed☆169Updated 2 years ago
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆75Updated this week
- all paths lead to clouds☆638Updated 2 years ago
- Static analysis for CloudFormation templates to identify common misconfiguration☆56Updated 3 years ago
- An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share th…☆204Updated 4 years ago
- GitHub Issue + Trivy Action☆55Updated 2 years ago
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- Scans your Github Actions for security issues☆86Updated last week
- Offensive Terraform Website☆45Updated 5 years ago
- A tool to check the security settings of Github Organizations.☆72Updated 2 years ago
- Lightspin AWS IAM Vulnerability Scanner☆95Updated 4 years ago
- ☆66Updated 6 years ago
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆106Updated last year
- Useful scripts, Docker images, docker-compose apps, and Terraform modules.☆151Updated last week
- ☆41Updated 5 years ago
- IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)☆98Updated 3 years ago
- A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.☆197Updated last year
- sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.☆82Updated 4 years ago
- rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, …☆162Updated 4 years ago
- Security configuration checks for popular cloud native applications and infrastructure.☆119Updated 3 years ago
- CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…☆87Updated this week
- a tool to audit the istio service mesh☆173Updated 3 years ago