developer-security
Here are 38 public repositories matching this topic...
An awesome list of OSS developer-first security tools
-
Updated
May 15, 2025
An ongoing & curated collection of awesome software practices and remediation, libraries and frameworks,payloads and techniques, best guidelines and technical resources about Application Security
-
Updated
Sep 23, 2023 - Python
Application scanning component of OWASP PurpleTeam
-
Updated
Feb 12, 2023 - JavaScript
Fleet AI Security Posture Management (AI-SPM): client agents on each developer machine score their AI coding agents' guard surfaces (Claude Code, Cursor, Codex, Gemini CLI — permissions, hooks, sandboxes, mcp.json) and ship hash-anchored events to a central server + your SIEM. Fleet-wide posture; measures, doesn't block. Rust.
-
Updated
Oct 17, 2026 - Rust
NEXUS REDFOX — Local-first code intelligence and security analysis platform for developers and security researchers.
-
Updated
Aug 13, 2026 - Python
TLS scanning component of OWASP PurpleTeam
-
Updated
Feb 8, 2023 - JavaScript
Offline, read-only repository triage for documented software supply-chain and coding-agent attacks, with explicit coverage and fail-closed results
-
Updated
Oct 4, 2026 - Python
Infrastructure as Code for SUTs
-
Updated
Jun 19, 2022 - HCL
Server scanning component of OWASP PurpleTeam
-
Updated
Mar 5, 2023 - JavaScript
Stage Two containers of OWASP PurpleTeam
-
Updated
Feb 3, 2023 - Shell
AWS Lambda functions of OWASP PurpleTeam
-
Updated
Jul 13, 2022 - JavaScript
Post-compromise forensic tool for developer workstations
-
Updated
Jun 9, 2026 - Go
How to identify, analyze, and report targeted phishing campaigns on GitHub — with real-world case studies and a step-by-step takedown workflow.
-
Updated
Apr 1, 2026
Security scanner for VSIX, MCP, AI IDEs, and developer workflow attack paths.
-
Updated
May 9, 2026 - Python
Instructions and materials to run the HIPSTER workshop
-
Updated
Aug 15, 2023
Zero-trust API firewall and security integrity layer for autonomous AI agents & Model Context Protocol (MCP) tool execution. Secure, TOCTOU-proof, fail-closed.
-
Updated
Oct 14, 2026 - Rust
AI-powered vulnerability reporting platform that automates pentest report generation from raw findings into professional, client-ready deliverables.
-
Updated
Apr 8, 2026 - HTML
An interactive, privacy-first cybersecurity simulator exposing how social engineering scams manipulate trust, exploit urgency, and compromise security.
-
Updated
Oct 14, 2026 - JavaScript
Claude Code skill that hardens package manager configs against supply chain attacks. Run /harden once, it detects what you have and secures it.
-
Updated
Apr 3, 2026
Free MCP + AI agent trust preflight: 20 practical checks, safe examples, VS Code tooling, drift review and authority analysis.
-
Updated
Aug 13, 2026
Add this topic to your repo
To associate your repository with the developer-security topic, visit your repo's landing page and select "manage topics."