| 10/14 | 8 |
Privacy-first hybrid static-analysis tool for Python, TypeScript, and Go that detects dead code, secrets, and security vulnerabilities.
|
| 10/08 | 8 |
Powerful tool for discovering, classifying, validating, and analyzing leaked credentials.
|
| 10/14 | 7 |
A GitHub repository CI/CD analyzer that scans for security and best-practice gaps and suggests relevant tools across multiple CI providers and output formats.
|
| 10/14 | 7 |
Evidence store and policy engine for Software Supply Chain attestations, SBOMs, VEX, SARIF, and QA reports.
|
| 10/11 | 7 |
Tool that blocks malicious packages during installation by wrapping existing package managers.
|
| 10/08 | 6 |
High-performance secrets scanner for source code, git history, and binary files, offering CLI, Go library, Burp and Chrome extensions, 459 detection rules, and live credential validation.
|
| 10/14 | 2 |
Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.
|