smokedmeat — A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

copacetic — 🧵 CLI tool for directly patching container images!

onecli — Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

trivy — Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

cve-bin-tool — The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

dalec — 📦 Produce secure packages and containers with declarative configurations