trivy — Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

copacetic — 🧵 CLI tool for directly patching container images!

smokedmeat — A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

cve-bin-tool — The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

dalec — 📦 Produce secure packages and containers with declarative configurations

certificates — 🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.