Top SUPPLY-CHAIN-SECURITY GitHub Repositories & Tools (2026)

agent runtime security - zero trust, zero setup, zero latency.

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

Catalogue all images of a Kubernetes cluster to multiple targets with Syft

ReARM - Release Governance Platform

Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.