twilio-labs / deadshotLinks
Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository
☆191Updated last year
Alternatives and similar repositories for deadshot
Users that are interested in deadshot are comparing it to the libraries listed below
Sorting:
- Open source compliance tool for development platforms.☆288Updated 2 years ago
- A crowdsourced Google Cloud IAM permissions reference.☆25Updated 3 months ago
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆76Updated this week
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆170Updated 9 months ago
- Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).☆143Updated 6 months ago
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆334Updated 6 months ago
- ☆41Updated 5 years ago
- all paths lead to clouds☆638Updated 2 years ago
- Scans every git push to your Github organisations to find unwanted secrets.☆87Updated 6 months ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated 2 years ago
- Threat matrix for CI/CD Pipeline☆758Updated last year
- Offensive Terraform Website☆45Updated 5 years ago
- Scans your Github Actions for security issues☆86Updated last week
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆105Updated last year
- A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.☆197Updated last year
- sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.☆82Updated 4 years ago
- Compares and analyzes GCP IAM roles.☆77Updated 7 months ago
- Static analysis for CloudFormation templates to identify common misconfiguration☆56Updated 3 years ago
- Hands-on Exercises for "Dangerous attack paths: Modern Development Environment Security - Devices and CI/CD pipelines"☆45Updated 3 years ago
- Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrust…☆112Updated last month
- a tool to audit the istio service mesh☆173Updated 4 years ago
- A tool to check the security settings of Github Organizations.☆72Updated 2 years ago
- ☆114Updated 2 months ago
- Add comments to pull requests where tfsec checks have failed☆169Updated 2 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 3 years ago
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆234Updated last week
- Trivy's misconfiguration scanning engine☆216Updated 9 months ago
- CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…☆87Updated this week
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago