mdclarkson Goto Github PK

offensive-ai-compilation

A curated list of useful resources that cover Offensive AI.

owasp-jenkins

Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker? :whale: :shield: :lock:

pipeline2detailedreport

pipeline2html

generates a human-readable .HTML file from the Veracode pipeline verification results.json file

poro

Scan publicly accessible assets on your AWS cloud environment

powershell_cicd_repository

This tool greatly simplifies Windows administrator life by automating the whole scripting content lifecycle. So the boring stuff like backuping, syntax checking, code formatting, content distribution or deletion will be automated and only thing left will be the code writing :)

preflight

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

py-html-contextual-escaping

Automatically exported from code.google.com/p/py-html-contextual-escaping

raudi

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.

s3-buckets-by-size

A python script that lists s3 buckets by size, including intelligent tiering.

s3crets_scanner

securitytools

Security Tools

shiftleft-java-demo

shiftleft-python-demo

snyk_exporter

Prometheus exporter for Snyk

social-media-profile-scrapers

Fetch user's data across social media

tcm_plugin

Early Vulnerability Detection for Supporting Secure Programming

trivyreporting

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises.

vcodeautomitigate

Command line app that mitigates flaws in Veracode based on CWE, scan type, and specific text in the description.

vcodecsv

Creates a CSV file with all open flaws for a Veracode account. The default includes policy-violating, non-mitigated flaws for all scan types. Flags can be used to override.

vcodeflawsxmltocsv

Converts the Veracode Detailed Report XML to a CSV with one entry per flaw.

vcodeflowdocknotifier

Utility designed to be run in a build process after a Veracode scan to notify a Flowdock flow that the scan completed. Optional to include policy compliance info in notification.

vcodemitigationexpire

Utility designed to be run on a regular cadence (e.g., weekly cron job) to expire mitigations. The types of mitigations, expiration references, and other settings are controlled in a JSON config file.

vcodescaextractor

A utility to extract SCA history from a Veracode account.

vcodeslacknotifier

Utility designed to be run in a build process after a Veracode scan to notify a Slack channel that the scan completed. Optional to include policy compliance info in notification.

veracode-badge

a deployment to produce badges for repositories decorations

veracode-cli

veracode-cli-1

veracode-jenkins-verademo