Go Devsecops

Open-source Go projects categorized as Devsecops
Edit details
Topics: Security Golang security-tools DevOps Kubernetes
The modern identity platform for B2B SaaS
The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
workos.com
Sponsored

Top 23 Go Devsecops Projects

  • trivy

    Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

    • Project mention: A Deep Dive Into Terraform Static Code Analysis Tools: Features and Comparisons | dev.to | 2024-04-16

    Trivy Owner/Maintainer: Aqua Security Age: First released on GitHub on May 7th, 2019 License: Apache License 2.0 backward-compatible with tfsec

  • gitleaks

    Protect and discover secrets using Gitleaks 🔑

    • Project mention: How to use Lefthooks in your node project? | dev.to | 2024-04-11

    install gitleaks in your machine gitleaks

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • trufflehog

    Find and verify credentials

    • Project mention: Seeking help to identify vulnerabilities and secrets in a website backup file | /r/HowToHack | 2023-07-03

    Trufflehog

  • Netmaker

    Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

    • Project mention: Netmaker: An open source WireGuard VPN | news.ycombinator.com | 2024-02-23

  • tfsec

    Security scanner for your Terraform code

    • Project mention: A Deep Dive Into Terraform Static Code Analysis Tools: Features and Comparisons | dev.to | 2024-04-16

    tfsec Owner/Maintainer: Aqua Security (acquired in 2021) Age: First released on GitHub on March 5th, 2019 License: MIT License tfsec project is no longer actively maintained in favor of the Trivy tool. But because many people still use it and it's quite famous, I added tfsec to this comparison. However, I recommend against using it for new projects.

  • steampipe

    Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

    • Project mention: Steampipe: Dynamically query APIs, code and more with SQL | news.ycombinator.com | 2024-04-04

  • terrascan

    Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

    • Project mention: A Deep Dive Into Terraform Static Code Analysis Tools: Features and Comparisons | dev.to | 2024-04-16

    Terrascan Owner/Maintainer: Tenable (acquired in 2022) Age: First release on GitHub on November 28th, 2017 License: Apache License 2.0

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • dalfox

    🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

  • SecretScanner

    :unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

  • ContainerSSH

    ContainerSSH: Launch containers on demand

    • Project mention: Ask HN: Tell us about your project that's not done yet but you want feedback on | news.ycombinator.com | 2023-08-16

    - Build your own honeypot with ContainerSSH (DevConf CZ 2021) [4]

    [1]: https://containerssh.io

  • bearer

    Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

    • Project mention: Show HN: Bearer Code Security Scanner Add Support for Java, PHP, Go, and Python | news.ycombinator.com | 2023-10-26

  • DevSecOps

    ♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎 (by hahwul)

  • YaraHunter

    🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

  • copacetic

    🧵 CLI tool for directly patching container images using reports from vulnerability scanners

    • Project mention: copacetic: 🧵 CLI tool for directly patching container images using reports from vulnerability scanners | /r/blueteamsec | 2023-11-25

  • legitify

    Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

    • Project mention: GitHub - Legit-Labs/legitify: Detect and remediate misconfigurations and security risks across all your GitHub GitLab assets. Version 1.0 is out, check out the new enterprise-level policies. | /r/netsec | 2023-08-04

  • chain-bench

    An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

  • ChopChop

    ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

  • nmap-formatter

    A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot) or sqlite. Simply put it's nmap converter.

    • Project mention: NMAP-formatter: convert NMAP results to HTML, CSV, JSON, graphviz (dot), SQLite | news.ycombinator.com | 2024-01-26

  • threagile

    Agile Threat Modeling Toolkit

    • Project mention: Threagile – Agile Threat Modeling Toolkit | news.ycombinator.com | 2023-11-17

  • Selefra

    The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).

    • Project mention: A Better Version Is Released - Selefra v0.2.3 | /r/Selefra | 2023-07-03

    [Feature]Modules support filtering, while labels support customization of any format. by @FelixsJiang in #30

  • bomber

    Scans Software Bill of Materials (SBOMs) for security vulnerabilities

  • stackql

    Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework

    • Project mention: Cloud Tools You Probably Haven't Heard Of | dev.to | 2024-03-31

    Like Steampipe's revolutionary approach, StackQL harnesses the power of SQL to query your resources seamlessly. Moreover, it empowers you to utilize SQL syntax for querying and creating resources.

  • yatas

    :owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Go Devsecops related posts

Index

What are some of the best open-source Devsecops projects in Go? This list will help you:

Project Stars
1 trivy 21,316
2 gitleaks 15,225
3 trufflehog 13,863
4 Netmaker 8,952
5 tfsec 6,544
6 steampipe 6,379
7 terrascan 4,494
8 dalfox 3,272
9 SecretScanner 2,956
10 ContainerSSH 2,565
11 bearer 1,736
12 DevSecOps 1,619
13 YaraHunter 1,229
14 copacetic 778
15 legitify 706
16 chain-bench 698
17 ChopChop 651
18 nmap-formatter 595
19 threagile 562
20 Selefra 507
21 bomber 453
22 stackql 433
23 yatas 303

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com