A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.
-
Updated
Dec 1, 2025 - JavaScript
#
code-security
Here are 57 public repositories matching this topic...
Static Value-Flow Analysis Framework for Source Code
llvm static-analysis dependency-analysis code-analysis static-analyzer pointer-analysis points-to-analysis source-code-analysis code-security static-value-flow
-
Updated
Dec 8, 2025 - C++
🎯 Server Side Template Injection Payloads
security security-audit web code injection source bounty bugbounty payload payloads websecurity source-code-analysis ssti server-side-template-injection code-security bugbountytips payloadbox
-
Updated
Jul 18, 2024
Globstar is a fast, feature-rich, and open-source static analysis toolkit for writing and running code checkers. Based on tree-sitter.
-
Updated
Jul 3, 2025 - Go
Prevent merging of malicious code in pull requests
obfuscation static-analysis pull-request github-app security-tools cloud-security security-review malware-detection security-rules code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan block-merging cicd-security opengrep
-
Updated
Mar 20, 2025 - Python
🎯 CSV Injection Payloads
security csv bug-bounty bugbounty payload payloads websecurity websec code-security bugbountytips payloadbox csv-injection csv-exploit csv-payload csv-payloads
-
Updated
Jul 18, 2024
Django application that performs SAST and Malware Analysis for Android APKs
docker django malware django-rest-framework apk malware-analysis android-security mobile-security virustotal androguard apk-analysis sast code-security defect-dojo mobile-audit
-
Updated
Dec 6, 2025 - HTML
Focused malicious code detection ruleset, with a high protection-to-noise ratio
security obfuscation detection malware ruleset appsec devsecops cloud-security malware-detection code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan malicious-detection cicd-security opengrep
-
Updated
Feb 24, 2025 - Python
AI code generation and improvement
-
Updated
Aug 29, 2025 - Python
The purpose of this document is to outline the security risks and vulnerabilities that may arise when implementing ChatGPT in web applications and to provide best practices for mitigating these risks.
security ai best-practices openai vulnerabilities mistral ai-agents claude gemini-api code-security security-risks vulnerabilities-fix chatgpt anthropic-claude security-best-practices
-
Updated
Dec 6, 2025
Monitor your code for exposed API keys, tokens, credentials, and high-risk security IaC misconfigurations
-
Updated
Sep 12, 2023 - TypeScript
Codeaudit - Modern Python source code analyzer based on distrust.
python security static-analysis audit owasp appsec python-security vulnerability-scanners vulnerability-assessment code-scanning security-testing sast complexity-measure sourcecode-analysis code-audit codeanalyzer code-auditing code-security sldc code-security-audit
-
Updated
Dec 4, 2025 - Python
Official documentation for Gitsecure
-
Updated
Oct 17, 2024 - MDX
Contexi let you interact with entire codebase or data with context using a local LLM on your system.
ai re-ranking code-search application-security security-tools ai-security rag code-security llm retrieval-augmented-generation ai-security-tool
-
Updated
Oct 23, 2024 - Python
Automatically monitors GitHub for code similarities and potential plagiarism using GitHub API. Includes Slack & Email alerts and an AI-based scanning skeleton for advanced code similarity detection.
github-api automation python-script plagiarism-detection copyright-protection github-actions code-security ai-detection alerting-system code-monitoring
-
Updated
Dec 3, 2025 - Python
How to secure your development pipeline with static application security test (SAST) / Dynamic application security test (DAST), software composition analysis (SCA) using Sonarqube.
maven static-analysis sonarqube dynamic-analysis application-security vulnerability-management sca secure-development devsecops software-composition-analysis sast dast dependency-scanning code-security open-source-security
-
Updated
Dec 6, 2025
AI-powered browser-based vulnerability scanner using UniXcoder embeddings and RAG with LLM to detect security flaws across 9 languages.
nextjs static-analysis cybersecurity cve cwe vulnerability-scanner pinecone rag fastapi groq code-security llm unixcoder
-
Updated
Oct 10, 2025 - TypeScript
PyGitGuard is a Git security scanner designed to prevent accidental commits of sensitive data by scanning for:
git best-practices python-library python-lib pre-commit python3 sensitive-data secrets-detection code-security credentials-scanner password-detector credentials-verification exposed-credentials password-detection
-
Updated
Jul 20, 2025 - Python
Securing your Code with GitHub workshop
-
Updated
May 12, 2025 - TypeScript
The only tool your project needs to ensure security and quality. Open-source and free.
-
Updated
Nov 13, 2025 - Rust
Improve this page
Add a description, image, and links to the code-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the code-security topic, visit your repo's landing page and select "manage topics."