Vet alternatives for AI agents.

A vulnerability scanner for container images and filesystems

Go security checker

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Security risk analysis for Kubernetes resources

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Interactive architecture diagrams for codebases

Tfsec is now part of Trivy

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

Scan the world (for secrets)

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A tool to enforce Swift style and conventions.

Program for determining types of files for Windows, Linux and MacOS.

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.