copacetic — 🧵 CLI tool for directly patching container images!

trivy — Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

cve-bin-tool — The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

UTMStack — Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

smokedmeat — A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

dalec — 📦 Produce secure packages and containers with declarative configurations