Security · Development

Development

• bridgecrewio/checkov on GitHub, opens in a new tab

  8.9Kstars

  A static analysis tool for infrastucture as code (Terraform).

  Python·Apache License 2.0·active·4 days ago

• Bearer/bearer on GitHub, opens in a new tab

  2.7Kstars

  Scan code for security risks and vulnerabilities leading to sensitive data exposures.

  Go·Other·active·14 hours ago

• Checkmarx/kics on GitHub, opens in a new tab

  2.7Kstars

  Scans IaC projects for security vulnerabilities, compliance issues, and infrastructure misconfiguration. Currently working with Terraform projects, Kubernetes manifests, Dockerfiles, AWS CloudFormation Templates, and Ansible playbooks.

  Open Policy Agent·Apache License 2.0·active·3 days ago

• pompelmi/pompelmi on GitHub, opens in a new tab

  671stars

  Node.js file-upload malware scanner with MIME sniffing, ZIP-bomb protection and optional YARA rules.

  JavaScript·ISC License·active·3 months ago

• insidersec/insider on GitHub, opens in a new tab

  552stars

  A open source Static Application Security Testing tool (SAST) written in GoLang for Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C# and Javascript (Node.js).

  Go·MIT License·dormant·4 years ago

• zaproxy/zap-api-nodejs on GitHub, opens in a new tab

  60stars

  Leverage the OWASP Zed Attack Proxy (ZAP) within your NodeJS applications with this official API.

  JavaScript·Apache License 2.0·active·6 hours ago