twilio-labs / deadshotLinks
Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository
☆190Updated last year
Alternatives and similar repositories for deadshot
Users that are interested in deadshot are comparing it to the libraries listed below
Sorting:
- Open source compliance tool for development platforms.☆287Updated 2 years ago
- Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).☆143Updated 8 months ago
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆337Updated 8 months ago
- A crowdsourced Google Cloud IAM permissions reference.☆25Updated 6 months ago
- ☆41Updated 5 years ago
- Static analysis for CloudFormation templates to identify common misconfiguration☆56Updated 3 years ago
- all paths lead to clouds☆638Updated 2 years ago
- Offensive Terraform Website☆45Updated 5 years ago
- Add comments to pull requests where tfsec checks have failed☆169Updated 2 years ago
- ☆66Updated 6 years ago
- Scans every git push to your Github organisations to find unwanted secrets.☆87Updated 8 months ago
- Trivy's misconfiguration scanning engine☆215Updated 11 months ago
- A tool to check the security settings of Github Organizations.☆75Updated 2 years ago
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆171Updated 11 months ago
- A production-friendly malware scanner for your AWS cloud☆200Updated 4 years ago
- Threat matrix for CI/CD Pipeline☆759Updated last year
- sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.☆81Updated 4 years ago
- Evaluate source control (GitHub) security posture☆251Updated 2 years ago
- ☆74Updated 5 years ago
- Script to audit GitHub Action Workflow files for potential vulnerabilities.☆156Updated last year
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆79Updated 2 weeks ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated 2 years ago
- Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrust…☆114Updated 4 months ago
- Hands-on Exercises for "Dangerous attack paths: Modern Development Environment Security - Devices and CI/CD pipelines"☆45Updated 3 years ago
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆105Updated 2 years ago
- Compares and analyzes GCP IAM roles.☆78Updated 10 months ago
- rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, …☆162Updated 4 years ago
- Scans your Github Actions for security issues☆89Updated 2 weeks ago
- IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)☆98Updated 3 years ago
- An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share th…☆205Updated 4 years ago