Security Scanning
Showing 36 of 76 projects
Pack your entire codebase into a single AI-friendly file for analysis by LLMs like Claude, ChatGPT, and Gemini.
A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more.
A curated directory of static analysis (SAST) tools and linters for all programming languages, config files, and build tools.
A vulnerability scanner for container images, filesystems, and SBOMs to detect known security issues.
A vulnerability scanner for container images, filesystems, and SBOMs to detect known security issues.
An open-source platform for continuous code quality inspection and security analysis across 30+ programming languages.
A static code analysis tool that scans infrastructure as code, container images, and open source packages for security misconfigurations and vulnerabilities.
A static code analysis tool that scans infrastructure as code, container images, and open source packages for security misconfigurations and vulnerabilities.
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
A static analysis tool for finding errors and security vulnerabilities in PHP applications.
Automated security health metrics for open source projects, assessing security best practices and risks.
A static code analyzer that detects security and compliance violations in Infrastructure as Code before provisioning cloud infrastructure.
A static code analyzer that detects security and compliance violations in Infrastructure as Code before provisioning cloud infrastructure.
An enterprise-friendly Python tool for detecting and preventing secrets from entering codebases with a baseline approach.
A dynamic infrastructure framework for distributing security scanning workloads across multiple cloud instances.
A source code analyzer that identifies features and characteristics in software components using static analysis and a JSON rules engine.
A static analysis tool for finding bugs in Java code, succeeding the FindBugs project.
A collection of automated AI-powered workflows for code review, security scanning, and design review using Claude Code agents.
An open-source Cloud Security Posture Management (CSPM) tool that scans AWS, Azure, GCP, Oracle, and GitHub for security misconfigurations.
A collection of pre-commit hooks for automating code quality, security, and documentation checks for Terraform, OpenTofu, and Terragrunt configurations.
A static analysis tool that checks Kubernetes YAML files and Helm charts for security and production readiness best practices.
A universal secret manager CLI for developers that centralizes secrets from multiple providers and prevents secret sprawl.
Static application security testing (SAST) tool that scans source code to discover, filter, and prioritize security and privacy risks.
A static application security testing (SAST) tool that scans source code to discover, filter, and prioritize security and privacy risks.
KICS is an open-source static analysis tool that finds security vulnerabilities, compliance issues, and misconfigurations in Infrastructure as Code.
ESLint plugin that identifies potential security vulnerabilities in Node.js code, requiring human triage for false positives.
A Claude Agent skill providing best practices, testing strategies, and CI/CD workflows for Terraform and OpenTofu infrastructure code.
Scans websites for publicly known security vulnerabilities in frontend JavaScript libraries using the Snyk database.
A command-line client for SSL Labs APIs, enabling automated and bulk SSL/TLS security assessments.
A linting tool that scans AWS CloudFormation templates for insecure infrastructure patterns and security violations.
A static code analyzer for JavaScript, TypeScript, and CSS that detects quality and security issues.
A CLI tool that audits API specifications, validates OpenAPI compliance, and runs security tests to prevent undefined user behavior.
A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.