A multi-vault secret injection tool for safely injecting secrets into app environment
A controlled environment for demonstrating and understanding buffer overflow vulnerabilities in web applications. This project is designed for educational purposes as part of secure software development training.
DocF-Sec-Check helps to make your Dockerfile commands more secure.
🛡 Scan GitHub repositories for dependency vulnerabilities using OSV database. Supports npm, PyPI, RubyGems, Go, and PHP.
The place where you will find all security related topics/tools/techniques made by developers for developers concerned about security.
A program that checks and removes unwanted input ensuring that data conforms to security-related requirements.
A security platform that watches, protects, and scales your microservices.
Python-based secure coding review project demonstrating vulnerability identification and remediation techniques.
HackRange DevSecOps cyber security TRAINING lab (deliberately vulnerable, fake secrets). Local Lab option for the course Learning the Software Build Process: one command, disposable Ubuntu 22.04+ VM.
A Web Application to demonstrate Face recognition as the 2 factor authentication.
Air-gapped AI-assisted software assurance platform that combines application context analysis, security tool orchestration, vulnerability correlation, attack-path reasoning, and human-in-the-loop validation.
CI gates that carry evidence of having gone red on a real defect, and the same rules as an agent skill: 92 production-discipline rules, each with the incident behind it — part of them decided by the bundle's own checkers, the rest written for an agent to read; latest v0.10.0, Python 3.11+, archived under a DOI.
To associate your repository with the secure-software-development topic, visit your repo's landing page and select "manage topics."