google/oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
A star delta has been computed for 61,707 of 62,640 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 00:35 and 04:33 (BKK).
OSS-Fuzz - continuous fuzzing for open source software.
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
A vulnerability scanner for container images and filesystems
Vulnerability Intelligence Platform
Vulnerability Static Analysis for Containers
Scalable fuzzing infrastructure.
🧵 CLI tool for directly patching container images!
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Automatically Collect POC or EXP from GitHub by CVE ID.
A static analysis security vulnerability scanner for Ruby on Rails applications
🧹 Cleaning up images from Kubernetes nodes
Anchore container analysis and scan provided as a GitHub Action
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Pentest Report Generator
Vulnerability (CVE) scanner for Nix/NixOS [maintainer=@henrirosten]
cve-search - a tool to perform local searches for known vulnerabilities
ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!
That's all 22 repositories in this period.
