S

security

Hoppr-Cop is CLI and Hoppr Plugin that generates high quality vulnerability information from a cyclone-dx Software Bill of Materials (SBOM) by aggregating data from multiple vulnerability databases.

Mirror of https://github.com/hwdsl2/docker-ipsec-vpn-server. Please open issues and pull requests there. Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. https://hub.docker.com/r/hwdsl2/ipsec-vpn-server

Bedrock RMF — self-hosted NIST 800-53 Rev 5 / RMF compliance management (an eMASS / Xacta alternative): control implementations to the CCI, POA&Ms, evidence, HW/SW inventory, PPSM, STIG checklists, cloud inheritance. AGPL-3.0.

Toolchain image for the Coroboros security gates.

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI.

G.U.A.R.D. is an automated Compliance-as-Code verification tool designed for cloud-native software. It bridges the semantic gap between qualitative regulatory frameworks (such as NEN 7510 and ISO 27001) and deterministic software controls by mapping compliance requirements directly to specific code symbols (anchors) and enforcing them within CI/CD pipelines.

This project provides a secure, minimal, and multi-architecture (linux/amd64, linux/arm64) Docker image to easily run a BorgBackup server over SSH. Built on Alpine Linux, it emphasizes security with a dedicated non-root backup user, ed25519 key-only authentication, and robust configuration options via authorized_keys and environment variables for flexible backup storage. Automated builds via GitLab CI.

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in dependencies by providing a prebuilt Docker container for DependencyCheck where the vulnerability database is already downloaded

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in containers by providing a prebuilt Docker container where the vulnerability database is already downloaded

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

For more information visit https://dheatattack.com

Ready-to-use Docker image that combine secret management tool SOPS and encryption tool age.

Scan Docker images for known vulnerabilities

Welcome to the most badass OpenVPN Client Docker image you'll ever see. This ain't your grandma's VPN setup. It's sleek, it's stealthy, and it’s ready to serve your rebellious needs.

EU AI Act compliance scanner for GitLab CI/CD pipelines — detects AI/ML libraries and posts risk classification as MR comments.

Containerimage for gitleaks

The from-source scanner bundle behind skillward — nine deterministic skill scanners in one offline, multi-arch image.