Discover aquasecurity/secfixes-tracker Open Source project

Moved to https://github.com/aquasecurity/trivy-operator

3,304

starboard

1,346

trivy-operator

Kubernetes-native security toolkit

1,249

microscanner

Scan your container images for package vulnerabilities with Aqua Security

Dockerfile

856

kubectl-who-can

Show who has RBAC permissions to perform actions on different resources in Kubernetes

810

trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

eBPF library for Go. Powered by libbpf.

807

libbpfgo

731

chain-bench

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

725

cloud-security-remediation-guides

Security Remediation Guides

698

vuln-list

NVD, Ubuntu, Alpine

408

btfhub

BTFhub, in collaboration with the BTFhub Archive repository, supplies BTF files for all published kernels that lack native support for embedded BTF. This joint effort ensures that even kernels without built-in BTF support can effectively leverage the benefits of eBPF programs, promoting compatibility across various kernel versions.

386

esquery

An idiomatic Go query builder for ElasticSearch

305

traceeshark

Deep Linux runtime visibility meets Wireshark

244

trivy-db

224

kube-query

[EXPERIMENTAL] Extend osquery to report on Kubernetes

223

harbor-scanner-trivy

Use Trivy as a plug-in vulnerability scanner in the Harbor registry

218

defsec

Trivy's misconfiguration scanning engine

213

postee

Simple message routing system that receives input messages through a webhook interface and can enforce actions using predefined outputs via integrations.

201

fanal

Static Analysis Library for Containers

200

cloudsec-icons

A collection of cloud security icons ☁️🔒

186

docker-bench

Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark

179

vuln-list-update

173

manifesto

Use Manifesto to store and query metadata for container images.

164

tfsec-pr-commenter-action

Add comments to pull requests where tfsec checks have failed

164

linux-bench

Checks whether a Linux server according to security best practices as defined in the CIS Distribution-Independent Linux Benchmark

152

go-dep-parser

Dependency Parser for Multiple Programming Languages

144

lmdrouter

Go HTTP router library for AWS API Gateway-invoked Lambda Functions

135

appshield

Security configuration checks for popular cloud native applications and infrastructure.

Open Policy Agent

118

starboard-lens-extension

Lens extension for viewing Starboard security information

A VS Code Extension for Trivy

117

trivy-vscode-extension

The BTFhub Archive repository provides BTF files for those published kernels that lack native support for embedded BTF, thereby enhancing the versatility of eBPF programs across different kernel versions.

116

btfhub-archive

aqua-helm

Helm Charts For Installing Aqua Security Components

Mustache

table

🧮 Tables for terminals, in Go.

tracee-action

Protect GitHub Actions with Tracee

Open Policy Agent

cfsec

Static analysis for CloudFormation templates to identify common misconfiguration

starboard-octant-plugin

Octant plugin for viewing Starboard security information

deployments

All Aqua deployments options and aquactl configuration

tfsec-sarif-action

Vanilla GitHub action to run tfsec

tfsec-action

An Azure Pipelines Task for trivy

trivy-azure-pipelines-task

Aqua Security's open source community

community

trivy-operator-lens-extension

https://github.com/aquasecurity/trivy-operator

A Go library for parsing and verifying versions and version constraints.

terraform-provider-aquasec

go-version

harbor-scanner-aqua

Aqua Enterprise scanner as a plug-in vulnerability scanner in the Harbor registry

aqua-operator

The aqua-operator is a group of controllers that runs within a Kubernetes or Openshift cluster that provides a means to deploy and manage Aqua Security cluster and Components.

trivy-checks

trivy-java-db

vscode-tfsec

vscode extension for tfsec

A Trivy plugin that scans the images of a kubernetes resource

trivy-kubernetes

Trivy kubernetes library

trivy-plugin-kubectl

Docker Desktop Extension for Trivy

trivy-docker-extension

Trivy plugin for OCI referrers

trivy-plugin-referrer

trivy-enforcer

[EXPERIMENTAL] Kubernetes Operator for Image Assurance

chain-bench-action

The repository not supported any more. Please use this one https://github.com/aquasecurity/deployments

aqua-aws

HCL

trivy-pipe

Bitbucket Pipe for running Trivy in a Pipeline

The Starboard Operator has moved to the main Starboard repo, and this one is being retired

starboard-operator

windows-bench

Checks whether a Windows server according to security best practices as defined in the CIS Distribution-Independent Windows Benchmark

saas-terraform-connection

Terraform modules for CloudSploit Scanner

HCL

trivy-ci-test

Dockerfile

vexhub

saas-api-samples

Sample code snippets for consuming the CloudSploit API

Aqua Open Source Helm Chart Repository

helm-charts

circleci-orb-microscanner

Enables scanning of docker builds in CircleCi for OS package vulnerabilities.

Dockerfile

vim-trivy

Vim Plugin for Trivy

Vim Script

vim-tfsec

List your tfsec issues in the QuickFix window with this plugin.

Vim Script

trivy-aws

trivy-plugin-aqua

Makefile

go-git-pr-commenter

library for adding comments to git PRs

binfinder

Find binary files not installed through package manager

trivy-sarif-demo

Common metadata repository for CSPM and TFSec checks

cloud-metadata

tracee-test-kernels

Kernels for testing tracee CO-RE feature

bench-common

Common code for hardening benchmarks

trivy-repo

deb/rpm repository for Trivy

aws-security-hub-plugin

Aqua Security AWS Security Hub plugin

tracee-tester

This is a spin-off from Tracee project responsible for generating the docker image that tests open-source signatures.

Unofficial Golang API for Bard Chat.

gobard

aqua-dash

Sample Aqua CSP dashboard

Vue

trivy-iac

scan-cve-2018-8115

Python

amazon-eks-devsecops

PHP

pipeline-enforcer-action

Trivy Plugin for the JetBrains family of IDEs

intellij-trivy

Java

go-pep440-version

A golang library for parsing PEP 440 compliant Python versions

tfsec-azure-pipelines-task

An Azure DevOps Task for tfsec

GitHub Action for Aqua Build Security

build-security-action

A golang library for parsing npm versions

go-npm-version

saas-integrations

CloudSploit third-party integrations