GitHub Trends
10.3K subscribers
15.4K links
See what the GitHub community is most excited about today.

A bot automatically fetches new repositories from https://github.com/trending and sends them to the channel.

Author and maintainer: https://github.com/katursis
Download Telegram
#java #ant_task #build_tool #gradle_plugin #jenkins_plugin #maven_plugin #security #security_audit #software_composition_analysis #vulnerability_detection

Dependency-Check is a tool that helps you find vulnerabilities in the libraries and dependencies your project uses. It checks for known security issues by matching your dependencies against a database of vulnerabilities. Here’s how it benefits you It identifies publicly disclosed vulnerabilities in your project's dependencies, helping you secure your software.
- **Ease of Use** It generates reports linking to the associated CVE entries, providing clear information about the vulnerabilities found.
- **Flexibility** It is widely recognized and used, with documentation and community support available.

Overall, Dependency-Check helps ensure your software is secure by automatically detecting and reporting potential vulnerabilities in your dependencies.

https://github.com/jeremylong/DependencyCheck
👍1
#typescript #penetration_testing #pentesting #security_audit #security_automation #security_tools

Shannon is a free, open-source AI pentester (Lite edition) that autonomously scans your web app's source code, finds vulnerabilities like injections and auth bypasses, then executes real exploits via browser to prove them. Launch with one Docker command using Anthropic API; it delivers pentester-grade reports with copy-paste PoCs in 1-1.5 hours for ~$50. It beat humans with 96% success on benchmarks, finding 20+ critical flaws in OWASP apps. You benefit by testing code daily on non-production setups, closing security gaps from yearly manual pentests, and shipping confidently without hackers striking first.

https://github.com/KeygraphHQ/shannon