Skip to content

#

devsecops

Here are 1,322 public repositories matching this topic...

Language: All

Filter by language

All 1,322 Python 253 Go 120 Shell 112 JavaScript 109 Java 80 HTML 79 HCL 72 TypeScript 72 Dockerfile 38 CSS 13

Sort: Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

go docker kubernetes golang security containers iac vulnerability infrastructure-as-code vulnerability-detection hacktoberfest vulnerability-scanners security-tools devsecops misconfiguration

Updated Sep 2, 2025
Go

gitleaks / gitleaks

Find secrets with Gitleaks 🔑

git go cli golang open-source security secret ci-cd cicd hacktoberfest dlp security-tools devsecops data-loss-prevention gitleaks ai-powered llm llm-training llm-inference

Updated Aug 14, 2025
Go

trufflesecurity / trufflehog

Find, verify, and analyze leaked credentials

security credentials secret secret-management verification secrets dynamic-analysis scanning precommit security-tools devsecops trufflehog

Updated Sep 1, 2025
Go

Mobile-Security-Framework-MobSF

MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg

Updated Aug 31, 2025
JavaScript

bytebase / bytebase

World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams. The GitHub/GitLab for database DevSecOps.

mysql security schema-migrations mongodb pam postgresql oracle snowflake dbeaver flyway database-access liquibase cicd sqlserver tidb devsecops data-security sql-client gitops data-masking

Updated Sep 2, 2025
Go

prowler-cloud / prowler

Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more. It helps for continuous monitoring, security assessments & audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, ENS and more

python aws security security-audit cloud azure iam gcp forensics compliance hardening security-hardening gdpr multi-cloud security-tools cloudsecurity devsecops cis-benchmark well-architected cspm

Updated Sep 1, 2025
Python

gravitl / netmaker

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

kubernetes security cloud self-hosted vpn mesh vpn-server k8s ipv6-support overlay-network wireguard devsecops zero-trust site-to-site mesh-network wireguard-vpn wg-quick virtual-networking wireguard-ui secure-remote-access

Updated Aug 30, 2025
Go

bunkerity / bunkerweb

🛡️ Open-source and next-generation Web Application Firewall (WAF)

letsencrypt docker nginx kubernetes security devops hosting waf reverse-proxy cybersecurity swarm web-security hardening modsecurity dnsbl web-application-firewall devsecops antibot bunkerized-nginx security-tuning

Updated Sep 1, 2025
Python

We5ter / Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

security-audit static-analysis smart-contracts penetration-testing malware-analysis binary-analysis information-security exploitation-framework vulnerability-scanners wifi-security hacker-tools security-automation devsecops apk-analysis wifi-hacking pentesting-tools redteam-tools code-analyzer privacy-compliance

Updated Aug 25, 2025

firezone / firezone

Enterprise-ready zero-trust access platform built on WireGuard®.

security cloud privacy elixir phoenix networking network firewall self-hosted vpn rust-lang vpn-server elixir-lang network-security wireguard virtual-network devsecops liveview wireguard-vpn wireguard-ui

Updated Sep 2, 2025
Elixir

turbot / steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

kubernetes golang aws security devops cis cloud etl azure sqlite terraform postgresql gcp hacktoberfest devsecops cspm steampipe postgresql-fdw cnapp zero-etl

Updated Aug 28, 2025
Go

aquasecurity / tfsec

Tfsec is now part of Trivy

go aws security digitalocean devops ci azure terraform scanner linter static-analysis infrastructure-as-code compliance google-cloud-platform hacktoberfest vulnerability-scanners devsecops misconfiguration terraform-security

Updated Aug 5, 2025
Go

sottlmarek / DevSecOps

Ultimate DevSecOps library

docker kubernetes aws security devops automation awesome cloud serverless tool azure containers gcp ci-cd cybersecurity k8s awesome-list devsecops ssdlc

Updated Jul 17, 2025

infobyte / faraday

Open Source Vulnerability Management Platform

security devops security-audit collaboration orchestration cybersecurity nmap penetration-testing vulnerability infosec pentesting cve nessus appsec vulnerability-management vulnerability-scanners burpsuite security-automation devsecops continuous-scanning

Updated Aug 28, 2025
Python

kubernetes-goat

madhuakula / kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

docker kubernetes infrastructure security container hacking owasp k8s cloud-native pentesting blueteam cloudsecurity devsecops cloud-security redteam container-security vulnerable-app kubernetes-security kubernetes-goat

Updated May 27, 2025
HTML

tenable / terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

kubernetes infrastructure aws security devops terraform architecture iac infrastructure-as-code scans aws-security security-tools cloudsecurity devsecops cloud-security sast azure-security gcp-security terrascan security-violations

Updated Jul 31, 2025
Go

deepfence / ThreatMapper

Open Source Cloud Native Application Protection Platform (CNAPP)

kubernetes devops containers secops cloud-native compliance vulnerability-detection vulnerability-management hacktoberfest observability vulnerability-scanners threat-analysis security-tools cloudsecurity devsecops scanning-tool registry-scanning cspm cwpp cnapp

Updated Jul 24, 2025
TypeScript

devsecops / awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

devops podcast devsecops threat-intelligence

Updated May 11, 2024

hahwul / dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

golang security xss vulnerability bugbounty xss-scanner xss-detection hacktoberfest devsecops xss-exploit xss-bruteforce cicd-pipeline bugbounty-tool

Updated Aug 27, 2025
Go

DefectDojo / django-DefectDojo

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

python kubernetes security automation django analytics owasp vulnerability-databases appsec vulnerability-management hacktoberfest security-orchestration security-automation devsecops vulnerability-correlation

Updated Sep 2, 2025
HTML

Improve this page

Add a description, image, and links to the devsecops topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the devsecops topic, visit your repo's landing page and select "manage topics."