Nushell
mitchellh/vouch
A community trust management system based on explicit vouches to participate.
Stars: 5,124Forks: 92Updated Oct 15, 2026
Security
Cloud security, identity, defensive tools, and security research.
Bookmarks for reference; inclusion does not indicate testing or a recommendation.
Repositories
Filters need JavaScript. You can browse the repositories and pages below.
Page 1. 83 repositories in this topic.
Python
icann/czds-api-client-python
A Python reference implementation for CZDS download zone file API
Stars: 131Forks: 53Updated Sep 18, 2026
TypeScript
DataDog/IDE-SHEPHERD-extension
A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE
Stars: 121Forks: 7Updated Oct 5, 2026
Go
tailscale/tailscale
The easiest, most secure way to use WireGuard and 2FA.
Stars: 37,698Forks: 3,361Updated Oct 18, 2026
2faoauth
TypeScript
gommzystudio/device-activity-tracker
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
Stars: 5,166Forks: 703Updated Oct 18, 2026
baileysexploit
Python
assetnote/react2shell-scanner
High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)
Stars: 2,453Forks: 270Updated Oct 13, 2026
Go
crtsh/ct_monitor
Certificate Transparency log monitor
Stars: 481Forks: 39Updated Oct 16, 2026
Shell
google/oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
Stars: 12,750Forks: 2,938Updated Oct 17, 2026
fuzz-testingfuzzing
TypeScript
step-security/harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Stars: 1,284Forks: 119Updated Oct 18, 2026
actionsegress-filtering
Go
mindersec/minder
Software Supply Chain Security Platform
Stars: 423Forks: 128Updated Oct 17, 2026
securitysoftware-supply-chain
Go
openbao/openbao
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
Stars: 8,505Forks: 632Updated Oct 18, 2026
gosecret-management
Python
TracecatHQ/tracecat
Open-source security automation platform for teams and AI agents
Stars: 3,836Forks: 435Updated Oct 17, 2026
agentsautomation
C
hashcat/hashcat
World's fastest and most advanced password recovery utility
Stars: 27,011Forks: 3,577Updated Oct 18, 2026
ccracking
Go
oauth2-proxy/oauth2-proxy
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
Stars: 15,211Forks: 2,238Updated Oct 18, 2026
cloud-infrastructurehacktoberfest
Shell
ComplianceAsCode/content
Security automation content in SCAP, Bash, Ansible, and other formats
Stars: 2,822Forks: 843Updated Oct 16, 2026
ansibleapplication-security
Python
SigmaHQ/sigma
Main Sigma Rule Repository
Stars: 11,264Forks: 2,867Updated Oct 18, 2026
elasticsearchids
TypeScript
OpenCTI-Platform/opencti
Open Cyber Threat Intelligence Platform
Stars: 10,156Forks: 1,479Updated Oct 18, 2026
cticyber
Go
DataDog/stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
Stars: 2,425Forks: 327Updated Oct 16, 2026
adversary-emulationaws
Go
trufflesecurity/trufflehog
Find, verify, and analyze leaked credentials
Stars: 28,559Forks: 2,645Updated Oct 18, 2026
credentialsdevsecops
HTMLArchived
cncf/tag-security
🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
Stars: 2,266Forks: 582Updated Oct 17, 2026
access-controlassessment
Go
chainloop-dev/chainloop
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
Stars: 601Forks: 62Updated Oct 18, 2026
agentic-sdlcai-agents
Python
cartography-cncf/cartography
Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database.
Stars: 4,145Forks: 587Updated Oct 17, 2026
Go
slsa-framework/slsa-verifier
Verify provenance from SLSA compliant builders
Stars: 347Forks: 74Updated Oct 13, 2026
Python
chains-project/dirty-waters
automatically detect software supply chain smells and issues http://arxiv.org/pdf/2410.16049
Stars: 20Forks: 6Updated Jun 30, 2026
C#
jfrog/jfrog-visual-studio-extension
No description provided.
Stars: 15Forks: 15Updated Aug 20, 2026
npm/registry
npm registry documentation
Stars: 498Forks: 115Updated Oct 6, 2026
docsdocumentation
Python
package-url/purl-spec
A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
Stars: 1,119Forks: 247Updated Oct 16, 2026
cyclonedxdependencies
Go
SpecterOps/BloodHound
Six Degrees of Domain Admin
Stars: 3,494Forks: 387Updated Oct 18, 2026
Go
synacktiv/octoscan
Octoscan is a static vulnerability scanner for GitHub action workflows.
Stars: 274Forks: 21Updated Oct 8, 2026
cicdexploit
Go
sigstore/rekor
Software Supply Chain Transparency Log
Stars: 1,218Forks: 226Updated Oct 16, 2026
provenancesecurity
Go
ossf/allstar
GitHub App to set and enforce security policies
Stars: 1,461Forks: 156Updated Oct 16, 2026
Go
ossf/scorecard
OpenSSF Scorecard - Security health metrics for Open Source
Stars: 5,764Forks: 745Updated Oct 18, 2026
openssf-scorecardscorecard
Go
notaryproject/notation
A CLI tool to sign and verify artifacts
Stars: 502Forks: 104Updated Oct 16, 2026
cloud-nativecncf
GoArchived
notaryproject/notary
Notary is a project that allows anyone to have trust over arbitrary collections of data
Stars: 3,290Forks: 519Updated Oct 12, 2026
cncfdocker
Go
kubescape/kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Stars: 11,807Forks: 1,064Updated Oct 17, 2026
best-practicedevops
Go
ossf/scorecard-action
Official GitHub Action for OpenSSF Scorecard.
Stars: 424Forks: 91Updated Oct 17, 2026
githubgithub-actions