* [TruffleHog v3.97.0](https://github.com/trufflesecurity/trufflehog) – Powerful tool for discovering, classifying, validating, and analyzing leaked credentials.

* [vet v1.19.0](https://github.com/safedep/vet) – Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.

* [njsscan 1.0.0](https://github.com/ajinabraham/njsscan) – Static application testing tool that uses semantic-aware pattern matching to find insecure code patterns in Node.js applications.

* [Chainloop v1.107.0](https://github.com/chainloop-dev/chainloop) – Evidence store and policy engine for Software Supply Chain attestations, SBOMs, VEX, SARIF, and QA reports.

* [Skylos v4.35.0](https://github.com/duriantaco/skylos) – Privacy-first hybrid static-analysis tool for Python, TypeScript, and Go that detects dead code, secrets, and security vulnerabilities.

* [Zanadir 0.3.0](https://github.com/MustacheCase/zanadir) – A GitHub repository CI/CD analyzer that scans for security and best-practice gaps and suggests relevant tools across multiple CI providers and output formats.

* [Package Manager Guard (PMG) v0.27.0](https://github.com/safedep/pmg) – Tool that blocks malicious packages during installation by wrapping existing package managers.

* [Bearer v2.1.1](https://github.com/Bearer/bearer) – Static application security testing tool that analyzes source code and data flows to find, filter, and prioritize security and privacy risks.

* [PII-Shield v2.2.0](https://github.com/pii-shield/pii-shield) – Zero-code Kubernetes sidecar that redacts PII from logs pre-egress using entropy analysis and deterministic hashing.

* [Shai-Hulud 2.0 Detector v2.2.0](https://github.com/gensecaihq/Shai-Hulud-2.0-Detector) – Detects compromised npm packages and suspicious activities related to the Shai-Hulud 2.0 supply chain attack.

* [Kubesplaining v1.2.0](https://github.com/0hardik1/kubesplaining) – Kubernetes security assessment CLI that builds multi-hop RBAC privilege-escalation graphs from live clusters or snapshots and outputs risk-prioritized reports with remediation paths.

* [Titus v1.2.8](https://github.com/praetorian-inc/titus) – High-performance secrets scanner for source code, git history, and binary files, offering CLI, Go library, Burp and Chrome extensions, 459 detection rules, and live credential validation.

* [Betterleaks v1.8.1](https://github.com/betterleaks/betterleaks) – Detects passwords, API keys, and tokens in git repos, files, or stdin using configurable, high-performance scanning.

* [sbomasm v2.0.10](https://github.com/interlynk-io/sbomasm) – Comprehensive SBOM lifecycle toolkit for assembling, editing, enriching, removing sensitive data, signing, and viewing SBOMs.