GitHub Trends
10.1K subscribers
15.3K links
See what the GitHub community is most excited about today.

A bot automatically fetches new repositories from https://github.com/trending and sends them to the channel.

Author and maintainer: https://github.com/katursis
Download Telegram
#go #containers #devsecops #docker #go #golang #hacktoberfest #iac #infrastructure_as_code #kubernetes #misconfiguration #security #security_tools #vulnerability #vulnerability_detection #vulnerability_scanners

Trivy is a powerful tool that helps you find security issues in various places like container images, filesystems, Git repositories, and more. It checks for vulnerabilities, misconfigurations, sensitive information, and software licenses. Trivy supports many programming languages and platforms, making it very versatile. You can easily install it using methods like `brew install trivy` or `docker run aquasec/trivy`. It also integrates with popular tools like GitHub Actions and Kubernetes. Using Trivy helps you secure your projects by identifying potential security problems early, which is very beneficial for keeping your software safe and reliable.

https://github.com/aquasecurity/trivy
#go #devsecops #git #gitleaks #go #golang #hacktoberfest #secret #security #security_tools

Gitleaks is a tool that helps you find and prevent hardcoded secrets like passwords, API keys, and tokens in your git repositories. It's easy to use and can be installed via Homebrew, Docker, or Go. You can run Gitleaks as a pre-commit hook or as a GitHub action to automatically check your code for secrets before committing.

Using Gitleaks benefits you by ensuring your sensitive information is not accidentally exposed in your code, making your projects more secure. It scans your repository for any hidden secrets and alerts you, so you can remove them before they become public. This protects your project from potential security breaches and maintains the confidentiality of your credentials.

https://github.com/gitleaks/gitleaks
#go #credentials #devsecops #dynamic_analysis #hacktoberfest #precommit #scanning #secret #secret_management #secrets #security #security_tools #trufflehog #verification

TruffleHog is a powerful tool that helps you find and verify leaked credentials in various places like Git repositories, chats, wikis, logs, and more. Here’s how it benefits you TruffleHog can search for secrets in many different sources such as Git, chats, wikis, logs, and file systems.
- **Classification** For each found secret, TruffleHog checks if it is live and active.
- **Analysis**: It provides detailed information about the secret, such as who created it and what resources it can access.

Using TruffleHog helps you protect your credentials by detecting and verifying them before they cause any harm. You can install it via various methods like Docker, binary releases, or compiling from source, making it easy to integrate into your security workflow.

https://github.com/trufflesecurity/trufflehog
#shell #case_management #cyber_security #endpoint_security #information_security #intrusion_detection_system #monitoring #network_security #security #security_tools #threat_hunting

Security Onion 2.4 is a new version of a security tool that helps protect your network. It has features like alerts, dashboards, and detection tools to find and stop threats. You can also use it to hunt for suspicious activity and analyze network traffic. The benefit to you is that it makes it easier to keep your network safe from cyber attacks and provides clear visuals and tools to manage security effectively. You can find more details on how to download, install, and use it through the provided links.

https://github.com/Security-Onion-Solutions/securityonion
👎1
#go #golang #security #security_automation #security_tools #static_analysis #static_code_analysis

Gosec is a tool that checks your Go code for security issues. It scans your code to find problems like hard-coded credentials, unsafe code practices, and other vulnerabilities. You can install it easily using commands or integrate it into your GitHub actions for automated checks. Gosec allows you to customize which rules to run, exclude certain files or folders, and generate reports in various formats. This helps you identify and fix security issues quickly, making your code more secure and reliable.

https://github.com/securego/gosec
3
#python #active_directory #hacking #infosec #infosectools #networks #pentest #pentest_tool #pentest_tools #pentesting #python #python3 #red_team #security #security_tools #windows

NetExec is a powerful tool for network security testing. It helps users automate tasks like finding vulnerabilities, executing commands on remote machines, and gathering network information. This tool is especially useful for penetration testers and cybersecurity professionals. By using NetExec, users can efficiently assess and improve the security of large networks, making it easier to identify and fix weaknesses. It supports various network protocols and integrates well with other security tools, making it a valuable asset for those in the cybersecurity field.

https://github.com/Pennyw0rth/NetExec
#python #security #security_tools #vulnerability #vulnerability_databases #vulnerability_management #vulnerability_scanners

OSV is a free, open-source database and toolset that helps you find and manage security vulnerabilities in open source software you use. It collects vulnerability data from many sources, including official advisories and automated scans, and presents it in a clear, machine-readable format. You can use the OSV scanner tool to automatically check your software dependencies for known security issues, helping you fix them quickly. This improves your software’s security by focusing on real risks and making vulnerability management easier and more efficient. OSV also offers APIs and integrates with other tools for automation and alerts.

https://github.com/google/osv.dev