Tools
bundler-audit
rubysec/bundler-audit
bundler-audit is a Ruby security tool that checks Gemfile.lock for vulnerable gem versions and insecure gem sources. It runs offline, supports ignore rules and integrates easily into CI pipelines.
Topics
Related projects
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
brakeman7.3kBrakeman is a static analysis security scanner for Ruby on Rails applications that inspects source code for vulnerabilities and reports findings in multiple formats.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
npq1.8kA CLI that audits npm packages before installation, checking vulnerabilities, age, popularity, install scripts and provenance to reduce supply-chain risk.
graudit1.7kA lightweight source-code auditing tool that uses grep and language-specific regex signature databases to flag potential security flaws from the command line.
Web-Cache-Vulnerability-Scanner1.2kA Go CLI scanner that tests web applications for cache poisoning and cache deception using multiple techniques, crawling, proxy support, and JSON reporting.