Devsecops GitHub Repositories (2026) · Open Source Tools

⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

🧵 CLI tool for directly patching container images!

Protect against malicious open source packages 🤖

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for release decisions.

🔧 JetBrains Qodana’s official command line tool

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

An open-source security platform for the community. Unified SIEM, SOAR, WAF, and more in a single, self-hosted solution.

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

High-speed web security auditor & DevSecOps dashboard for SSL, HTTP headers, DNS defenses, and port exposure.

Open-source CI/CD security tool: finds the security checks your pipeline is missing, and the ones that can never fail the build. GitHub Actions, GitLab CI and more.

Open-source AI agent framework for cloud security across AWS, Azure, GCP and Kubernetes: AI-powered cloud detection and response, and cloud security posture management findings triage.

Free, open-source learning hub for Cloud, DevOps & AI — 330K+ words of full tutorials, 21 cheat sheets, 19 interview Q&A sets, and certification exam prep, with built-in reading progress. No paywall, ever.