Open-source security tools and assessments.
-
OpenSecBench — Open, local-first security assessment workbench: executable methodologies, sandboxed tool runners, evidence with full provenance, and a multi-agent AI Analyst.
-
ActionSieve — Multi-platform CI/CD pipeline security scanner. Detects injection vulnerabilities, supply chain risks, and misconfigurations in GitHub Actions, GitLab CI, Azure Pipelines, Jenkins, CircleCI, Bitbucket Pipelines, and more.
-
ActionSieve Action — GitHub Action wrapper for ActionSieve with SARIF upload to Code Scanning.
-
ActionSieve Corpus — Detection patterns and test cases for ActionSieve.