y4ney Goto Github PK

bench-common

Common code for hardening benchmarks

chain-bench

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

cis-benchmark

CIS基准的中文版本

cloud-native-security-knowledge-management

云原生安全知识管理

cloud-native-security-news

方便获取每日安全资讯的爬虫和推送程序

cnnvd

collect-aliyun-vuln

阿里云漏洞收集

collect-cnnvd-vuln

CNNVD 漏洞收集

contained.af

A stupid game for learning about containers, capabilities, and syscalls.

django-defectdojo

DefectDojo is a DevSecOps and vulnerability management tool.

docker-bench

Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark

docker-lamp

Docker Lamp Stack (Apache2, MySQL, Multiple PHP 5.6, 7.4, 8.0) with Ubuntu for MAC M1 (Apple Silicon).

fanal

Static Analysis Library for Containers

go-cve-dictionary

Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.

go-cwe-dictionary

This is tool to build a local copy of the CWE (Common Weakness Enumeration).

go-design-patterns

go设计模式

go-rpmdb

RPM DB bindings for go

go-simplejson

a Go package to interact with arbitrary JSON

identywaf

Blind WAF identification tool

infocollect

信息收集

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

k8s-db-collector

Collect k8s deprecated and removed API information and save it in parsable format automatically

kbom

KBOM - Kubernetes Bill of Materials

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

kube-hunting

kube-vul-list-update

Kubernetes漏洞收集

kube_security_lab

kubeclarity

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

llm-security

LLM 安全资料收集与学习