Search Results for "scan"
Sort By:
Showing 105 open source projects for "scan"
View related business solutions-
Airlock Digital - Application Control (Allowlisting) Made SimpleFor organizations seeking the most effective way to prevent malware and ransomware in their environments. It has been designed to provide scalable, efficient endpoint security for organizations with even the most diverse architectures and rigorous compliance requirements. Built by practitioners for the world’s largest and most secure organizations, Airlock Digital delivers precision Application Control & Allowlisting for the modern enterprise.
-
AI-Powered Identity GovernanceDefine governance policies, manage access, and optimize licenses with unified visibility across every identity, app, and file.
-
1
KubeClarity
KubeClarity is a tool for detection and management of vulnerabilities
...Effective vulnerability scanning requires an accurate Software Bill Of Materials (SBOM) detection. KubeClarity includes a CLI that can be run locally and especially useful for CI/CD pipelines. It allows to analyze images and directories to generate SBOM, and scan it for vulnerabilities. The results can be exported to KubeClarity backend. -
2
AWS Toolkit for JetBrains
A plugin for interacting with AWS from JetBrains IDEs
...CodeWhisperer uses machine learning to generate code suggestions from the existing code and comments in your IDE. Supported languages include: Java, Python, and JavaScript. In addition to providing code suggestions within your current file, CodeWhisperer can scan your code package to identify security issues. Connect to AWS using static credentials, credential process, or AWS SSO. View and manage AWS resources. Locally test and step-through debug functions in a Lambda-like execution environment provided by the AWS SAM CLI. Supports Java, Python, Node.js, and .NET Core. -
3
PEASS-ng
Privilege Escalation Awesome Scripts SUITE
These tools search for possible local privilege escalation paths that you could exploit and print them to you with nice colors so you can recognize the misconfigurations easily. All the scripts/binaries of the PEAS suite should be used for authorized penetration testing and/or educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own machines and/or with the owner's permission. Here you will find... -
4
Trivy Operator
Kubernetes-native security toolkit
The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernetes API. The Operator does this by watching Kubernetes for state changes and automatically triggering security scans in response. For example, a vulnerability scan is initiated when a new Pod is created. -
Gearset | The complete Salesforce DevOps solutionGearset is the only platform you need for unparalleled deployment success, continuous delivery, automated testing and backups.
-
5
lidarslam_ros2
ROS 2 package of 3D lidar slam using ndt/gicp registration
ROS 2 package of 3D lidar slam using ndt/gicp registration and pose-optimization. ros2 slam package of the frontend using OpenMP-boosted gicp/ndt scan matching and the backend using graph-based slam. -
6
Semgrep
Lightweight static analysis for many languages
...Find and prevent security issues in Terraform, Docker, Kubernetes, nginx, and AWS configs before they go into production. Go beyond application code and protect the entire stack with a breadth of scanning capabilities. Don't leak secrets, scan every commit and ensure secrets don't make it to production. Protect the privileged CI/CD environment from malicious activity that could result in access to source code, secrets, and more. Run with registry rules or your own. Code is analyzed locally (not uploaded). Get results at ludicrous speed with diff-aware scans, review findings in MR and PR comments, and deploy Semgrep across your organization’s projects. ... -
7
Retire.js
Scanner detecting the use of JavaScript libraries
..."Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10 and insecure libraries can pose a huge risk for your web app. The goal of Retire.js is to help you detect the use of versions with known vulnerabilities. Scan a web app or node app for use of vulnerable JavaScript libraries and/or node modules. grunt-retire scans your grunt-enabled app for use of vulnerable JavaScript libraries and/or node modules. Scans visited sites for references to insecure libraries and puts warnings in the developer console. An icon on the address bar displays will also indicate if vulnerable libraries were loaded. ... -
8
MCScanX
MCScanX: Multiple Collinearity Scan toolkit X version
MCScanX is a toolkit for detecting gene synteny and collinearity, aiding in the evolutionary analysis of gene arrangements across multiple genomes. It extends the original MCScan algorithm by incorporating additional utilities for visualization and downstream analyses. -
9
Dockle
Container Image Linter for Security
...You can install dockle with the asdf version manager with this plugin, which automates the process of installing (and switching between) various versions of github release binaries. With asdf already installed, run commands to install dockle. You can scan your built image with Dockle in Travis CI/CircleCI. Though, you can ignore the specified target checkpoints by using .dockleignore file. Or, if you just want the results to display and not let the test fail for this, specify --exit-code to 0 in dockle command. -
The AI coach for teams, built on validated assessments.Give managers and teams proactive, contextual coaching to lead effectively, communicate clearly, and navigate real work situations as they happen.
-
10
Gitleaks
Protect and discover secrets using Gitleaks
...With over 6.8 million docker downloads, 11.2k GitHub stars, 1.7 million GitHub Downloads, thousands of weekly clones, and over 400k homebrew installs, gitleaks is the most trusted secret scanner among security professionals, enterprises, and developers. Gitleaks-Action is our official GitHub Action. You can use it to automatically run a gitleaks scan on all your team's pull requests and commits, or run on-demand scans. If you are scanning repos that belong to a GitHub organization account, then you'll have to obtain a license. Gitleaks can be installed using Homebrew, Docker, or Go. Gitleaks is also available in binary form for many popular platforms and OS types on the releases page. ... -
11
Envy
Keep your .env.example file up to date
Automate keeping your environment files in sync. How many times have you onboarded a new dev onto your team, only to have to spend ages debugging with them because your project's .env.example file is wildly outdated? Too many to count if you're anything like us. Wouldn't it be nice if there were a way to ensure your environment files stay up to date? That's why we created Envy. With a simple Artisan command, you can sync your environment files with your project config to keep everything... -
12
Gobot
Golang framework for robotics, drones, and the Internet of Things
Gobot makes controlling robots and devices incredibly simple and fun. This program connects to an Arduino, and toggles an LED, every one second. Support for devices that use Analog Input/Output (AIO) communication have a shared set of drivers provided using the "gobot/drivers/aio" package. Support for devices that use General Purpose Input/Output (GPIO) communication have a shared set of drivers provided using the "gobot/drivers/gpio" package. Gobot has a extensible system for connecting to... -
13
ReacType
Prototyping Tool for exporting React/Typescript Applications!
...After opening the dmg and dragging ReacType into your Applications folder, ctrl+click the icon and select 'Open' from the context menu to run the app. This extra step is necessary since we don't have an Apple developer license yet. If you are given a warning that Apple could not scan the app. Users can now manage state dynamically within nested components using React Hooks within the state manager tab. For a selected component, users can see a list of available props from the parent, add props, and delete props in case they are not required later on. -
14
wa-automate-nodejs
WhatsApp tool for chatbots with advanced features
...For more details see Easy API. After executing create() function, @open-wa/wa-automate will create an instance of WA web. If you are not logged in, it will print a QR code in the terminal. Scan it with your phone and you are ready to go! @open-wa/wa-automate will remember the session so there is no need to authenticate every time. -
15
Papermerge
Open Source Document Management System for Digital Archives
Papermerge is an open source document management system (DMS) primarily designed for archiving and retrieving your digital documents. Instead of having piles of paper documents all over your desk, office or drawers - you can quickly scan them and configure your scanner to directly upload to Papermerge DMS. Store, organize and index scanned documents in PDF, JPEG and TIFF formats. Instantly find relevant information using full text, tags and metadata-based search. Papermerge is free and open-source software which means that transparency is the core value of our software development. ... -
16
Showkase
Annotation-processor based Android library
Showkase is an Android library developed by Airbnb that helps teams organize, visualize, and manage their Jetpack Compose UI components through an automatically generated component browser. It uses annotation processing to scan the codebase and build a structured interface where developers can explore all composables, colors, and typography in one place. This significantly improves discoverability and reuse of UI elements, which is often a major challenge in large codebases with hundreds of components. Showkase also renders components under different conditions such as dark mode, right-to-left layouts, and scaled fonts, allowing developers to identify issues early in the development process. ... -
17
Osmedeus Core Engine
A Workflow Engine for Offensive Security
Osmedeus is a Workflow Engine for Offensive Security that allows you to build and run a reconnaissance system on a wide range of targets, including domains, URLs, CIDRs, and GitHub repositories. It was designed to establish a strong foundation and has the ability to adapt and function automatically in order to perform reconnaissance tasks. Designed to build a foundation with the capability and flexibility that allow you to run your reconnaissance system automatically. Osmedeus is a Workflow... -
18
JSDoc
An API documentation generator for JavaScript
JSDoc 3 is an API documentation generator for JavaScript, similar to Javadoc or phpDocumentor. You add documentation comments directly to your source code, right alongside the code itself. The JSDoc tool will scan your source code and generate an HTML documentation website for you. JSDoc's purpose is to document the API of your JavaScript application or library. It is assumed that you will want to document things like modules, namespaces, classes, methods, method parameters, and so on. JSDoc comments should generally be placed immediately before the code being documented. ... -
19
FengNiao
A command line tool for cleaning unused resources in Xcode
The FengNiao project is a lightweight command-line utility designed to help iOS/macOS developers clean up their Xcode projects by detecting and removing unused image resource files. As projects evolve, image assets often accumulate — many of which may no longer be referenced in code, storyboards, or asset catalogs; FengNiao scans the project directory (and subfolders) to identify those orphaned resources and optionally delete them, helping to reduce project bloat and potential app size. The... -
20
Resources-Front-End-Beginner
The most essential list of resources for Front-End beginners
Resources-Front-End-Beginner is a curated, continually updated directory for people starting their front-end journey. It organizes learning links across topics like HTML, CSS, JavaScript, Git, tooling, and practice projects, making it easy to chart a study path. The repository balances conceptual resources with hands-on tutorials and challenges so learners can build muscle memory. It also highlights community spaces and reference material to encourage collaboration and long-term growth.... -
21
Guides
Design and development guides
...It is not a library in the usual sense, but acts as a “meta-guide” index — a directory of authoritative resources rather than runnable code. The content is organized as Markdown links and descriptions, making it easy to scan and browse for relevant topics (for instance style guides for Ruby, JavaScript, CSS, deployment, architecture). Because it is community-driven and open to contributions, you’ll find new links and categories being added over time, helping it remain relevant. -
22
subjack
Subdomain Takeover tool written in Go
Subjack is a Subdomain Takeover tool written in Go designed to scan a list of subdomains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass testing. Always double-check the results manually to rule out false positives. Subjack will also check for subdomains attached to domains that don't exist (NXDOMAIN) and are available to be registered. -
23
zpdf
Zero-copy PDF text extraction library written in Zig
zpdf is a high-performance PDF text extraction library written in Zig that focuses on speed, low overhead, and modern parsing techniques. It leans heavily on memory-mapped file reading and zero-copy patterns where possible, so it can scan large PDFs without repeatedly copying data around in memory. The library supports streaming extraction using efficient arena allocation, making it well suited for workloads that need to process big documents quickly or in batches. It implements multiple PDF decompression filters and handles common font encoding pathways, which are essential for turning raw PDF content streams into readable text. ... -
24
free-for.dev
A list of SaaS, PaaS and IaaS offerings that have free tiers
free-for-dev is a long-running, community-curated catalog of services that offer free tiers useful to developers, students, makers, and small teams. The list spans hosting, databases, CI/CD, monitoring, source control, APIs, design tools, and more, organized into clear categories so readers can scan and compare options quickly. It emphasizes practical limits such as usage caps, seat counts, rate limits, and time-boxed trials, helping users spot real-world constraints before adopting a tool. The repository is maintained via pull requests and issue discussion, so new services and policy changes can be incorporated as providers evolve their offerings. ... -
25
PowerHub
A post exploitation tool based on a web application
PowerHub is a PowerShell-based automation framework designed to centralize and orchestrate common administrative tasks across Windows environments. It exposes a modular command set for inventorying systems, managing services, deploying packages, and executing remote commands with consistent logging and error handling. The project places emphasis on discoverability and reuse: scripts are organized into reusable modules and functions with clear parameter contracts so teams can compose...
