ducthinh993 Goto Github PK

guac

GUAC aggregates software security metadata into a high fidelity graph database.

helm-secrets

Successor of zendesk/helm-secrets - A helm plugin that help manage secrets with Git workflow and store them anywhere

helm4sec

List of helm-ready security tool to help your Security team easy deploy applications on Kubernetes.

images

Public Chainguard Images

kubestrike

A Blazing fast Security Auditing tool for Kuberentes

macos-workspace

metabigor

Intelligence tool but without API key

nerve

NERVE Continuous Vulnerability Scanner

onix

A reactive configuration manager designed to support Infrastructure as a Code provisioning, and bi-directional configuration management providing a single source of truth across multi-cloud environments.

opencve

CVE Alerting Platform

oscp_checklist

osv-to-sarif

pacbot

PacBot (Policy as Code Bot)

panther

penetration-testing

List of awesome penetration testing resources, tools and other shiny things

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

plymouth-themes

A hugh collection (80+) of plymouth themes ported from android bootanimations

private-tls-cert

A simple Terraform module to generate self-signed TLS certificates for private use

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pwndoc

Pentest Report Generator

robusta

Open source Kubernetes troubleshooting and automation platform

salus

Security scanner coordinator

secmon

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.

secret-detection

Finding your secret(Credential, API Key, AWS Key, Token, etc.) in your source code, files

securecodebox

secureCodeBox (SCB) - continuous secure delivery out of the box

securitycontrolsframework

shamir

🔑 Split and combine secrets using Shamir's Secret Sharing algorithm

sigrun

Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.

slack-watchman

Monitoring your Slack workspaces for sensitive information

snyk-go-parser

A library to parse dependency manifests for Go