Tools
graudit
wireghoul/graudit
A lightweight source-code auditing tool that uses grep and language-specific regex signature databases to flag potential security flaws from the command line.
Topics
Related projects
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
DependencyCheck7.8kOWASP Dependency-Check is a software composition analysis tool that scans project dependencies, matches them against CVE data, and reports publicly disclosed vulnerabilities.
vulscan3.8kVulscan is an Nmap NSE module that turns version detection into vulnerability identification by matching services against bundled offline vulnerability databases.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
bundler-audit2.8kbundler-audit is a Ruby security tool that checks Gemfile.lock for vulnerable gem versions and insecure gem sources. It runs offline, supports ignore rules and integrates easily into CI pipelines.