boostsecurityio/poutine

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

CI/CD Security Analyzer

Static analysis for GitHub Actions (and more)

Protect against malicious open source packages 🤖

#supply #chain #attack #detection

Snyk CLI scans and monitors your projects for security vulnerabilities.

ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets