security

Full set of AppArmor profiles (~ 1500 profiles) https://apparmor.pujol.io

Convert from SARIF to GitLab Code Quality and SAST report.

Use Code Quality to analyze your source code’s quality and complexity. This helps keep your project’s code simple, readable, and easier to maintain.

DoLang is an experimental lean distro of the Go language for R&D orgs that do not want to risk their own patents using patent sensitive copy-right licensed Golang, Docker or Kubernetes.

Cellar Documentation: https://cellar-app.io | API Reference https://cellar-app.gitlab.io/cellar-api

Scans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is used to show how the GitLab vulnerability report can be populated by a custom scanner. You can see a demo of it in action be following the documentation in the Secret List project.

A structure-aware JSON fuzzer

Native MacOS, Linux and Windows desktop application with 110+ carefully crafted tools for yours and your teams everyday work with sensitive data in various formats.

This repository shows you how to inject secrets in your application from Hashicorp Vault in Kubernetes

GitLab Runner is the open source project that is used to run your CI/CD jobs and send the results back to GitLab.org, temir5live.blogger.com[GroupsGitlab, MurtazaTemir7]

Test Casbin authorization library

Secret Source is a Golang module to load secrets from various sources in a uniform way.

A simple Nginx OTP module for use with auth_request

Search for go depedency trees for any direct or indirect import to view all paths that leverage it in your software dependency list/bill of materials. No more searching to find what imported an indirect dependency when that flags with a CVE.

This project contains an insecure GoLang microservice. It is meant to be used with my Medium blog: https://awkwardferny.medium.com/go-application-security-and-appsec-automation-made-easy-36bd2f3d520b

Analyze password strength given physical limits to computation

This repo contains samples and code used to demo Container and Kubernetes security.

A tool for finding potential typosquattings of Go packages and modules hosted on GitHub and GitLab. https://michenriksen.com/blog/finding-evil-go-packages/